CVEs published in August 2012
741 vulnerabilities, 105 critical, 3 exploited.
- toocharger trombinoscopeSQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute...7.5 High
- s9y serendipitySQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1...7.5 High
- s9y serendipityCross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in...4.3 Medium
- nodejsThe Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does...6.4 Medium
- pivotxCross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier...4.3 Medium
- mybb** DISPUTED ** Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1...7.5 High
- itechscripts travelon expressMultiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to...7.5 High
- rwcinc free realtyMultiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free...6.8 Medium
- rwcinc free realtyMultiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute...7.5 High
- rwcinc free realtyMultiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers...4.3 Medium
- smartyCross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function...4.3 Medium
- hitachi it operations directorUnspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00...5.0 Medium
- hitachi it operations directorCross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50...4.3 Medium
- hitachi cobol gui option, cobol gui option server +1 moreUnspecified vulnerability in Hitachi Cobol GUI Option 06-00, 06-01 through 06-01-/A, 07-00, 07-01...10.0 High
- ppfeufer 2-click-social-media-buttonsCross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons...4.3 Medium
- ppfeufer 2-click-social-media-buttonsMultiple cross-site scripting (XSS) vulnerabilities in the 2 Click Social Media Buttons plugin...4.3 Medium
- mark jaquith bad behavior, wordpress +1 moreMultiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the...4.3 Medium
- efrontlearning efrontCross-site scripting (XSS) vulnerability in eFront 3.6.11 allows remote authenticated users to...3.5 Low
- efrontlearning efrontUnrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to...6.0 Medium
- ait-pro bulletproof-securityCross-site scripting (XSS) vulnerability in bulletproof-security/admin/options.php in the...4.3 Medium
- pu-gh socksoCross-site scripting (XSS) vulnerability in user/register in Sockso 1.5 and earlier allows remote...4.3 Medium
- itechscripts proman xpressCross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows...4.3 Medium
- itechscripts proman xpressSQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers...7.5 High
- bit51 better-wp-securityMultiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security...4.3 Medium
- bit51 better-wp-securityCross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security ...4.3 Medium
- redaxoCross-site scripting (XSS) vulnerability in include/classes/class.rex_list.inc.php in REDAXO 4.3...4.3 Medium
- libpng, canonical ubuntu linux, debian linux +1 more +3 moreThe png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48,...4.3 Medium
- jan kara linux diskquotaThe good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17...4.0 Medium
- libtiffThe t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does...6.8 Medium
- redhat certificate system, dogtag certificate system +1 moreRed Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly...5.5 Medium
- d.r.commander libjpeg-turboHeap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows...6.8 Medium
- redhat certificate system, dogtag certificate system +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...4.3 Medium
- mnt-tech wp-facethumbCross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for...4.3 Medium
- gnome gdk-pixbufMultiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before...5.0 Medium
- bytemark symbiosisBytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote...5.0 Medium
- iain gypsyMultiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause...2.1 Low
- iain gypsygypsy 0.8 does not properly restrict the files that can be read while running with root...1.9 Low
- redhat jboss community application server, jboss enterprise application platform +1 moretwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 Low
- hccgmbh mycare2xMultiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject...4.3 Medium
- hccgmbh mycare2xSQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote...7.5 High
- hccgmbh mycare2xMultiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary...7.5 High
- c4b xphone unified communications 2011Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web...4.3 Medium
- myrephp myre real estate softwareMultiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote...7.5 High
- george karpouzas yet another question \& answer systemYaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain...5.0 Medium
- joobi com jnewsThe jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive...5.0 Medium
- mysqldumperMySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request...4.3 Medium
- mysqldumperMySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct...4.3 Medium
- mysqldumperMultiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read...4.3 Medium
- mysqldumperMultiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote...5.1 Medium
- mysqldumperMultiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers...4.3 Medium
- Show moreLoading…