CVEs published in August 2012
741 vulnerabilities, 105 critical, 3 exploited.
- elxis cmsMultiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3...4.3 Medium
- vbulletinSQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to...7.5 High
- arbornetworks peakflow spCross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5...4.3 Medium
- giantrobot zipcartThe ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead...6.0 Medium
- mediafrontMultiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the...4.3 Medium
- wimleers cdnThe CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far...2.6 Low
- gizra og vocabThe Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote...2.1 Low
- jason savino fpThe Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer...5.0 Medium
- yaml-fuer-drupal linkcheckerincludes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does...5.0 Medium
- danielb finderThe finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x...6.0 Medium
- rik de boer revisioningThe hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks...6.4 Medium
- oracle java se, jre, jdk +4 more +6 moreMultiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7...9.8 Critical
- mono, canonical ubuntu linux, debian linux +2 moremono 2.10.x ASP.NET Web Form Hash collision DoS7.5 High
- ioserverDirectory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root...4.3 Medium
- pbboardUnrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators...6.8 Medium
- apache qpidApache QPID Allows Remote Authentication Bypass5.0 Medium
- gnu bashStack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local...4.6 Medium
- debian cifs-utilsmount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or...2.1 Low
- ffmpegHeap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in...5.0 Medium
- ffmpegInteger overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1...4.3 Medium
- pythonPython 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...1.9 Low
- sourcefabric newscoopCross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows...4.3 Medium
- andreas gohr dokuwikiCross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote...4.3 Medium
- sourcefabric newscoopMultiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before...4.3 Medium
- sourcefabric newscoopSQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4...7.5 High
- sourcefabric newscoopMultiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before...6.8 Medium
- andreas gohr dokuwiki** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01...6.8 Medium
- munin-monitoring muninmunin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers...5.0 Medium
- creative commons module project creativecommonsMultiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before...2.1 Low
- munin-monitoring muninmunin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or...5.0 Medium
- ematia elixirElixir can leak information due to weak use of crypto4.3 Medium
- munin-monitoring munincgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable...6.8 Medium
- munin-monitoring muninThe qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a...1.2 Low
- sitecom wlm-2501Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501...6.8 Medium
- elefantcmsElefant CMS Multiple XSS Vulnerabilities4.3 Medium
- fribidi pyfribidiPyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function5.0 Medium
- google tunnelblickTunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info...4.4 Medium
- google tunnelblickThe errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users...1.2 Low
- google tunnelblickRace condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended...1.2 Low
- google tunnelblickTunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN...6.9 Medium
- google tunnelblickTunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1)...7.2 High
- google tunnelblickTunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to...7.2 High
- google tunnelblickRace condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users...6.2 Medium
- bluecoat reporterDirectory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5...10.0 High
- bluecoat sgosBlue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to...5.0 Medium
- bluecoat directorCross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote...4.3 Medium
- bluecoat proxyone, proxysg +1 moreStack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat...10.0 High
- bluecoat proxysg, sgos, proxysg sg210-10 +13 more +15 moreCross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG...4.3 Medium
- bluecoat proxyav, avos +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance...9.3 High
- bluecoat proxysg, sgos, proxysg sg210-10 +13 more +15 moreThe Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x...5.0 Medium
- Show moreLoading…