Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

silverstripeSQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4...CVE-2011-49596.8 MediumSeptember 17, 2012
silverstripeSilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens...CVE-2010-50795.0 MediumSeptember 17, 2012
silverstripeSilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the...CVE-2010-50785.0 MediumSeptember 17, 2012
silverstripeSQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in...CVE-2010-48246.8 MediumSeptember 17, 2012
silverstripeCross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control...CVE-2010-48234.3 MediumSeptember 17, 2012
silverstripecore/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in ...CVE-2010-48224.3 MediumSeptember 17, 2012
trendmicro interscan messaging security suiteCross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro...CVE-2012-2996Public exploit6.8 MediumSeptember 17, 2012
trendmicro interscan messaging security suiteMultiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security...CVE-2012-2995Public exploit4.3 MediumSeptember 17, 2012
netwin surgemailCross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to...CVE-2012-2575Public exploit4.3 MediumSeptember 17, 2012
cisco iosThe SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly...CVE-2012-39243.5 LowSeptember 16, 2012
cisco iosThe SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does...CVE-2012-39233.5 LowSeptember 16, 2012
cisco application control engine moduleThe Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco...CVE-2012-39195.0 MediumSeptember 16, 2012
cisco iosThe DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of...CVE-2012-39155.0 MediumSeptember 16, 2012
cisco identity services engine, identity services engine software +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user...CVE-2012-39086.8 MediumSeptember 16, 2012
cisco intrusion prevention system, ips 4240, ips 4250 sx +3 more +5 moreThe updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote...CVE-2012-39015.0 MediumSeptember 16, 2012
cisco intrusion prevention system, ips 4240, ips 4250 sx +3 more +5 moresensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory,...CVE-2012-38995.0 MediumSeptember 16, 2012
cisco iosCisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service ...CVE-2012-38956.3 MediumSeptember 16, 2012
cisco iosThe FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause...CVE-2012-38936.3 MediumSeptember 16, 2012
cisco unity connectionCisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial...CVE-2012-30964.0 MediumSeptember 16, 2012
cisco anyconnect secure mobility clientThe VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3...CVE-2012-30945.0 MediumSeptember 16, 2012
cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether...CVE-2012-30889.3 HighSeptember 16, 2012
cisco iosCisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by...CVE-2012-30797.8 HighSeptember 16, 2012
cisco unity connectionCisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of...CVE-2012-30607.8 HighSeptember 16, 2012
cisco vpn clientUntrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges...CVE-2012-30526.9 MediumSeptember 16, 2012
cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 moreCisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial...CVE-2012-30516.1 MediumSeptember 16, 2012
google chrome, mozilla firefox +1 moreThe SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products,...CVE-2012-49302.6 LowSeptember 15, 2012
google chrome, mozilla firefox, debian linux +2 moreThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...CVE-2012-4929Public exploitFix available2.6 LowSeptember 15, 2012
oxwallCross-site scripting (XSS) vulnerability in ow_updates/index.php in Oxwall 1.1.1 allows remote...CVE-2012-4928Public exploit4.3 MediumSeptember 15, 2012
limesurveySQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and...CVE-2012-4927Public exploit7.5 HighSeptember 15, 2012
imgpals img pals photo hostapprove.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote...CVE-2012-4926Public exploit6.4 MediumSeptember 15, 2012
imgpals img pals photo hostMultiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote...CVE-2012-4925Public exploit7.5 HighSeptember 15, 2012
asus net4switch, ipswcom activex component +1 moreBuffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS...CVE-2012-4924Public exploitEPSS 36.3%9.3 HighSeptember 15, 2012
endian firewallMultiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers...CVE-2012-4923Public exploit4.3 MediumSeptember 15, 2012
mike carr flogrMultiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow...CVE-2012-4336Public exploit4.3 MediumSeptember 15, 2012
kayako fusionCross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs...CVE-2012-3233Public exploit4.3 MediumSeptember 15, 2012
teamst testlinkMultiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow...CVE-2012-2275Public exploit6.8 MediumSeptember 15, 2012
bananadance banana danceMultiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5...CVE-2011-51764.3 MediumSeptember 15, 2012
bananadance banana danceSQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows...CVE-2011-51757.5 HighSeptember 15, 2012
intel 3450 chipset, 7500 chipset, c206 chipset +17 more +19 moreBuffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM...CVE-2011-5174Fix available7.2 HighSeptember 15, 2012
bugbear flatoutBuffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to...CVE-2011-5173Public exploit6.8 MediumSeptember 15, 2012
powerproduction storyboard quickStack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and...CVE-2011-5172Public exploit9.3 HighSeptember 15, 2012
cyberlink power2goMultiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031)...CVE-2011-5171Public exploitEPSS 45.8%9.3 HighSeptember 15, 2012
castillobueno ccmplayerStack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to...CVE-2011-5170Public exploitEPSS 32.0%9.3 HighSeptember 15, 2012
dell sonicwall viewpointSQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in...CVE-2011-5169Public exploit7.5 HighSeptember 15, 2012
bananadance banana danceSQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to...CVE-2011-5168Public exploit7.5 HighSeptember 15, 2012
oracle hyperion strategic finance, tidestone formula one activex control +1 moreHeap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control...CVE-2011-5167Public exploit9.3 HighSeptember 15, 2012
elif keir knftpMultiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary...CVE-2011-5166Public exploit7.5 HighSeptember 15, 2012
cleanersoft free mp3 cd ripperStack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file,...CVE-2011-5165Public exploitEPSS 37.0%9.3 HighSeptember 15, 2012
vandyke absoluteftpStack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote...CVE-2011-5164Public exploitEPSS 28.6%9.3 HighSeptember 15, 2012
mitsubishi-automation mx4 scada, schneider-electric citectscada +1 moreBuffer overflow in an unspecified third-party component in the Batch module for Schneider...CVE-2011-51634.6 MediumSeptember 15, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open