Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
August

CVEs published in August 2012

741 vulnerabilities, 105 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

samsung net-i viewerStack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx...CVE-2012-4250Public exploit9.3 HighAugust 13, 2012
mybbMyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information...CVE-2012-23275.0 MediumAugust 13, 2012
mybbCross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka...CVE-2012-23264.3 MediumAugust 13, 2012
mybbSQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP...CVE-2012-23257.5 HighAugust 13, 2012
mybbMultiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote...CVE-2012-23247.5 HighAugust 13, 2012
ushahidi platformMultiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and...CVE-2012-34763.5 LowAugust 12, 2012
ushahidi platformThe installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which...CVE-2012-34757.5 HighAugust 12, 2012
ushahidi platformThe comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform...CVE-2012-34745.0 MediumAugust 12, 2012
ushahidi platformThe (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform...CVE-2012-34736.4 MediumAugust 12, 2012
ushahidi platformThe email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform...CVE-2012-34726.4 MediumAugust 12, 2012
ushahidi platformMultiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin...CVE-2012-34717.5 HighAugust 12, 2012
ushahidi platformMultiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php...CVE-2012-34707.5 HighAugust 12, 2012
ushahidi platformMultiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers...CVE-2012-34697.5 HighAugust 12, 2012
ushahidi platformMultiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers...CVE-2012-34687.5 HighAugust 12, 2012
e-supportportal escon supportportalMultiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3...CVE-2012-2590Public exploit4.3 MediumAugust 12, 2012
afterlogic mailsuite proMultiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote...CVE-2012-2587Public exploit4.3 MediumAugust 12, 2012
manageengine servicedesk plusMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow...CVE-2012-2585Public exploit4.3 MediumAugust 12, 2012
tdah t-day webmailMultiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote...CVE-2012-2573Public exploit4.3 MediumAugust 12, 2012
winwebmail serverMultiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote...CVE-2012-2571Public exploit4.3 MediumAugust 12, 2012
amazon kindle touchThe Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2...CVE-2012-424910.0 HighAugust 12, 2012
amazon kindle touchThe Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so...CVE-2012-42489.3 HighAugust 12, 2012
dir2webSQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers...CVE-2012-4070Public exploit7.5 HighAugust 12, 2012
dir2webDir2web 3.0 stores sensitive information under the web root with insufficient access control,...CVE-2012-40695.0 MediumAugust 12, 2012
altn mdaemonMultiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote...CVE-2012-2584Public exploit4.3 MediumAugust 12, 2012
caucho resinCaucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended...CVE-2012-29696.4 MediumAugust 12, 2012
caucho resinDirectory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29,...CVE-2012-29685.0 MediumAugust 12, 2012
caucho resinCaucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisonsCVE-2012-2967Fix available7.5 HighAugust 12, 2012
caucho resinCaucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parametersCVE-2012-2966Fix available7.5 HighAugust 12, 2012
caucho resinCaucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variablesCVE-2012-2965Fix available7.5 HighAugust 12, 2012
breakingpointsystems breakingpoint storm appliance, breakingpoint storm appliance ctm +1 moreThe BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a...CVE-2012-29645.0 MediumAugust 12, 2012
breakingpointsystems breakingpoint storm appliance, breakingpoint storm appliance ctm +1 moreThe administrative interface in the embedded web server on the BreakingPoint Storm appliance...CVE-2012-29635.0 MediumAugust 12, 2012
solarwinds orion network performance monitorMultiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network...CVE-2012-2602Public exploit6.8 MediumAugust 12, 2012
solarwinds orion network performance monitorMultiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance...CVE-2012-2577Public exploitEPSS 10.2%4.3 MediumAugust 12, 2012
phplistMultiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2...CVE-2012-4247Public exploit4.3 MediumAugust 12, 2012
phplistMultiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2...CVE-2012-4246Public exploit4.3 MediumAugust 12, 2012
pbboardThe new_password page in PBBoard 2.1.4 allows remote attackers to change the password of...CVE-2012-4035Public exploit7.5 HighAugust 12, 2012
pbboardMultiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute...CVE-2012-4034Public exploit7.5 HighAugust 12, 2012
phplistSQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote...CVE-2012-3953Public exploit7.5 HighAugust 12, 2012
phplistCross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows...CVE-2012-3952Public exploit2.6 LowAugust 12, 2012
cypherpunks libotrThe (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3)...CVE-2012-3461Fix available4.3 MediumAugust 12, 2012
pnp4nagiosPNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which...CVE-2012-34572.1 LowAugust 12, 2012
oracle database serverSQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11...CVE-2012-31326.5 MediumAugust 10, 2012
rsgallery2 com rsgallery2The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index...CVE-2012-42355.0 MediumAugust 10, 2012
rsgallery2 com rsgallery2Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2...CVE-2012-40714.3 MediumAugust 10, 2012
rsgallery2 com rsgallery2SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla!...CVE-2012-35547.5 HighAugust 10, 2012
rubyonrails rails, ruby on rails +1 moreactionpack Cross-site Scripting vulnerabilityCVE-2012-3465Fix available4.3 MediumAugust 10, 2012
rubyonrails rails, ruby on rails +1 moreactivesupport Cross-site Scripting vulnerabilityCVE-2012-3464Fix available4.3 MediumAugust 10, 2012
rubyonrails rails, ruby on rails +1 moreactionpack Cross-site Scripting vulnerabilityCVE-2012-3463Fix available4.3 MediumAugust 10, 2012
google chromeThe PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a...CVE-2012-28637.5 HighAugust 9, 2012
google chromeUse-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows...CVE-2012-28626.8 MediumAugust 9, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open