CVEs published in September 2012
651 vulnerabilities, 77 critical, 2 exploited.
- peter kovacs timesheet next genMultiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote...7.5 High
- collectivecolors taxonomy view integrator moduleCross-site scripting (XSS) vulnerability in the Taxonomy Views Integrator (TVI) module 6.x-1.x...3.5 Low
- wim leers hierarchical selectCross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8...2.1 Low
- thinkleft submenu treeCross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal...3.5 Low
- moodlecourse/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks...5.5 Medium
- moodlelib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not...5.0 Medium
- moodletheme/yui_combo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for...5.0 Medium
- moodlewebservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does...4.9 Medium
- moodleMoodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass...4.0 Medium
- moodlerepository/repository_ajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote...4.0 Medium
- mailtraqMultiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote...4.3 Medium
- smartertools smartermailMultiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to...4.3 Medium
- novell groupwiseCross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0...4.3 Medium
- novell groupwiseInteger overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in...10.0 High
- novell groupwiseThe iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0...4.3 Medium
- hp operations orchestrationUnspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers...10.0 High
- nathan haug webformMultiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform...2.1 Low
- ariel barreiro noderecommendationCross-site scripting (XSS) vulnerability in the Node Recommendation module 6.x-1.x before 6.x-1.1...2.1 Low
- fourkitchens ed readmoreCross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for...2.1 Low
- fourkitchens block classCross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7...2.1 Low
- wesjones multisite searchSQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote...6.8 Medium
- sven decabooter uc paydutchgroup \/ wedeal paymentUnspecified vulnerability in the UC PayDutchGroup / WeDeal payment module 6.x-1.0 for Drupal...4.0 Medium
- alex barth dataMultiple cross-site scripting (XSS) vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and...2.1 Low
- flexcmsMultiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow...6.8 Medium
- digium asteriskStack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x...7.5 High
- matomoPiwik (now Matomo) Vulnerable to Arbitrary Code Execution6.8 Medium
- freedesktop spice-gtk, gtk libgio +1 morelibgio, when used in setuid or other privileged programs in spice-gtk and possibly other products...6.9 Medium
- openstack keystoneOpenStack Keystone does not invalidate existing tokens when granting or revoking roles4.0 Medium
- color icclib, ghostscript, argyllcms cms +2 moreMultiple integer underflows in the icmLut_allocate function in International Color Consortium ...6.8 Medium
- freedesktop libdbuslibdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly...6.9 Medium
- siemens simatic pcs7, wincc +1 moreWebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products,...4.3 Medium
- siemens simatic pcs7, wincc +1 moreSQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in...7.5 High
- siemens simatic pcs7, wincc +1 moreMultiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and...4.3 Medium
- siemens simatic pcs7, wincc +1 moreWebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products,...5.0 Medium
- siemens simatic pcs7, wincc +1 moreCross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and...6.8 Medium
- microsoft internet explorerUse-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet...8.1 High
- cososys endpoint protector appliace 4The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the...7.5 High
- microsoft windows phone 7 firmwareMicrosoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field...5.9 Medium
- sami kiminki redirecting click bouncerOpen redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote...6.4 Medium
- nijskens raf admintoolsCross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows...6.8 Medium
- nijskens raf admintoolsCross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote...4.3 Medium
- steve lockwood ticketyboo news tickerCross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows...4.3 Medium
- paypal ubercart payflowThe Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers...5.0 Medium
- miura ubercart bulk stock updaterCross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for...6.8 Medium
- nathan brink content lockCross-site request forgery (CSRF) vulnerability in the Content Lock module for Drupal allows...6.8 Medium
- nikola posa webfoliocmsMultiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS...4.3 Medium
- silverstripeSilverstripe XSS Vulnerabilities4.3 Medium
- silverstripeSilverstripe CMS Arbitrary Code Execution6.8 Medium
- silverstripeSilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with...6.0 Medium
- silverstripeSQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12...7.5 High
- Show moreLoading…