Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

novadevelopement photoimpact x3Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain...CVE-2010-51996.9 MediumSeptember 6, 2012
intuit quickbooksMultiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to...CVE-2010-51986.9 MediumSeptember 6, 2012
pixiaUntrusted search path vulnerability in Pixia 4.70j allows local users to gain privileges via a...CVE-2010-51976.9 MediumSeptember 6, 2012
keepass password safeUntrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to...CVE-2010-51966.9 MediumSeptember 6, 2012
roxio mydvdUntrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a...CVE-2010-5195Public exploit6.9 MediumSeptember 6, 2012
owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote...CVE-2012-47536.8 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreappconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote...CVE-2012-47525.0 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote...CVE-2012-43974.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote...CVE-2012-43964.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote...CVE-2012-43954.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5...CVE-2012-43944.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote...CVE-2012-43936.8 MediumSeptember 5, 2012
owncloud serverindex.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote...CVE-2012-43927.5 HighSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0...CVE-2012-43916.8 MediumSeptember 5, 2012
owncloud, owncloud server +1 more(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before...CVE-2012-43904.0 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote...CVE-2012-43896.8 MediumSeptember 5, 2012
apache strutsDenial of service in Apache StrutsCVE-2012-4387Fix available5.0 MediumSeptember 5, 2012
apache strutsCross-Site Request Forgery in Apache StrutsCVE-2012-4386Fix available6.8 MediumSeptember 5, 2012
dell crowbarCross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml...CVE-2012-3551Public exploit4.3 MediumSeptember 5, 2012
openstack essex, horizon +1 moreOpenStack Keystone Allows Remote User Account CreationCVE-2012-3542Fix available4.3 MediumSeptember 5, 2012
openstack horizonOpen redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1...CVE-2012-3540Fix available5.8 MediumSeptember 5, 2012
dell crowbarThe Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer...CVE-2012-35374.6 MediumSeptember 5, 2012
uclouvain openjpegHeap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a...CVE-2012-3535Fix available6.8 MediumSeptember 5, 2012
gnome librsvglibrsvg before 2.34.1 uses the node name to identify the type of node, which allows context...CVE-2011-3146Fix available6.8 MediumSeptember 5, 2012
x x.org-xserverThe ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7...CVE-2010-4819Fix available3.6 LowSeptember 5, 2012
x.orgThe GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of...CVE-2010-4818Fix available8.5 HighSeptember 5, 2012
arbiter power sentinel, power sentinel 1133a firmware +1 moreThe Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote...CVE-2012-30127.8 HighSeptember 5, 2012
wikkawikiCross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1...CVE-2011-4452Public exploit6.8 MediumSeptember 5, 2012
wikkawiki** DISPUTED ** libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is...CVE-2011-4451Public exploitDisputedEPSS 14.2%4.3 MediumSeptember 5, 2012
wikkawikiDirectory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3...CVE-2011-4450Public exploit6.4 MediumSeptember 5, 2012
wikkawikiactions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports...CVE-2011-4449Public exploit6.8 MediumSeptember 5, 2012
wikkawikiSQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2...CVE-2011-4448Public exploit7.5 HighSeptember 5, 2012
moinmo moinmoinMoinMoin Improper Access ControlCVE-2012-4404Fix available6.0 MediumSeptember 5, 2012
gnu binutils, libiberty, canonical ubuntu linux +1 more +3 moreMultiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2)...CVE-2012-3509Fix available5.0 MediumSeptember 5, 2012
tiger-fish fancy slideMultiple cross-site scripting (XSS) vulnerabilities in fancy_slide.module in the Fancy Slide...CVE-2012-20682.1 LowSeptember 5, 2012
ckeditor, ckeditor fckeditor +1 moreUnspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6...CVE-2012-20676.8 MediumSeptember 5, 2012
ckeditor, ckeditor fckeditor +1 moreCross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the...CVE-2012-20664.3 MediumSeptember 5, 2012
freso languageiconsCross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and...CVE-2012-20653.5 LowSeptember 5, 2012
mark theunissen views lang switchCross-site scripting (XSS) vulnerability in theme/views_lang_switch.theme.inc in the Views...CVE-2012-20644.3 MediumSeptember 5, 2012
brian altenhofel slideboxThe Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows...CVE-2012-20635.0 MediumSeptember 5, 2012
buddypressSQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of...CVE-2012-2109Public exploit7.5 HighSeptember 4, 2012
coppermine-gallery coppermine photo galleryCoppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information...CVE-2012-1614Public exploit5.0 MediumSeptember 4, 2012
coppermine-gallery coppermine photo galleryCross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1...CVE-2012-1613Public exploit3.5 LowSeptember 4, 2012
typo3Typo3 Extbase Framework Unsafe DeserializationCVE-2012-1605Fix available5.0 MediumSeptember 4, 2012
mozilla bugzillaBugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3,...CVE-2012-47475.0 MediumSeptember 4, 2012
mozilla bugzillaAuth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x...CVE-2012-39815.0 MediumSeptember 4, 2012
symantec pgp universal serverSymantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that...CVE-2012-35822.9 LowSeptember 4, 2012
garrettcom magnum managed networks software-6k, magnum managed networks software-6k secure +1 moreThe Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14...CVE-2012-30147.7 HighSeptember 4, 2012
emc networkerFormat string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4...CVE-2012-2288Public exploitEPSS 33.1%9.3 HighSeptember 4, 2012
adobe photoshop cs5.5, photoshop cs6 +1 moreHeap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1...CVE-2012-027510.0 HighSeptember 4, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open