Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

apple mac os x, mac os x server +1 moreApple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords...CVE-2012-37182.1 LowSeptember 20, 2012
apple mac os x, mac os x server +1 moreCoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code...CVE-2012-3716Public exploit7.5 HighSeptember 20, 2012
apple safariApple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a...CVE-2012-37154.3 MediumSeptember 20, 2012
apple safariThe Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the...CVE-2012-37144.3 MediumSeptember 20, 2012
apple safariApple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents,...CVE-2012-37134.3 MediumSeptember 20, 2012
apple mac os x, mac os x server +1 moreBuffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6...CVE-2012-06507.5 HighSeptember 20, 2012
clonemonster social book facebook clone monsterMultiple cross-site scripting (XSS) vulnerabilities in Social Book Facebook Clone 2010 allow...CVE-2011-51904.3 MediumSeptember 20, 2012
svendecabooter webform validationCross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5...CVE-2011-51892.1 LowSeptember 20, 2012
tag1consulting support timerCross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before 6.x-1.4 for...CVE-2011-51882.1 LowSeptember 20, 2012
tag1consulting supportCross-site scripting (XSS) vulnerability in the Support Ticketing System module 6.x-1.x before 6...CVE-2011-51872.1 LowSeptember 20, 2012
burnsy jbshop pluginCross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows...CVE-2011-5186Public exploit4.3 MediumSeptember 20, 2012
realmatrix online subtitles workshopCross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop...CVE-2011-5185Public exploit4.3 MediumSeptember 20, 2012
hp network node manager iMultiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow...CVE-2011-5184Public exploit4.3 MediumSeptember 20, 2012
bioinformatics ordersysMultiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to...CVE-2011-5183Public exploit7.5 HighSeptember 20, 2012
wordpress lanoba social plugin** DISPUTED ** Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the...CVE-2011-5182Public exploitDisputed4.3 MediumSeptember 20, 2012
clickdesk live support-live chat pluginCross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat...CVE-2011-5181Public exploitEPSS 10.4%4.3 MediumSeptember 20, 2012
zooeffectCross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for...CVE-2011-5180Public exploit4.3 MediumSeptember 20, 2012
skysa app bar integration pluginCross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration...CVE-2011-5179Public exploit4.3 MediumSeptember 20, 2012
infoblox netmriMultiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in...CVE-2011-51784.3 MediumSeptember 20, 2012
esyndicat proMultiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3...CVE-2011-5177Public exploit4.3 MediumSeptember 20, 2012
wizonesolutions fillpdfThe Fill PDF module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to write to...CVE-2012-50075.0 MediumSeptember 20, 2012
databasepublish admin\Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows...CVE-2012-16316.8 MediumSeptember 20, 2012
nestor mata cuthbert taxonomy navigatorCross-site scripting (XSS) vulnerability in the Taxonomy Navigator module for Drupal allows...CVE-2012-16302.1 LowSeptember 20, 2012
dmitry loac taxotouchCross-site scripting (XSS) vulnerability in the Taxotouch module for Drupal allows remote...CVE-2012-16292.1 LowSeptember 20, 2012
63reasons supercronCross-site scripting (XSS) vulnerability in the SuperCron module for Drupal allows remote...CVE-2012-16283.5 LowSeptember 20, 2012
karen stevenson dateSQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6...CVE-2012-16266.0 MediumSeptember 20, 2012
wizonesolutions fillpdfEval injection vulnerability in the fillpdf_form_export_decode function in fillpdf.admin.inc in...CVE-2012-16256.0 MediumSeptember 20, 2012
erikwebb password policyCross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and...CVE-2012-16336.8 MediumSeptember 20, 2012
erik webb password policyCross-site scripting (XSS) vulnerability in password_policy.admin.inc in the Password Policy...CVE-2012-16322.1 LowSeptember 20, 2012
marvil07 vote up downCross-site scripting (XSS) vulnerability in vud_term.module in the Vote Up/Down module 6.x-2.x...CVE-2012-16273.5 LowSeptember 20, 2012
jam warehouse knowledgetree open sourceMultiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3...CVE-2012-0988Public exploit4.3 MediumSeptember 20, 2012
caminova djvu browser plug-inHeap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and...CVE-2012-50069.3 HighSeptember 19, 2012
frankdeveloper vr gpubCross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows...CVE-2012-5005Public exploit6.8 MediumSeptember 19, 2012
parallels h-sphereMultiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1...CVE-2012-50046.8 MediumSeptember 19, 2012
nomachine nx web companionnxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the...CVE-2012-50036.8 MediumSeptember 19, 2012
alquimia managesiteMultiple cross-site scripting (XSS) vulnerabilities in the Managesite module 6.x-1.x before 6.1-1...CVE-2012-16402.1 LowSeptember 19, 2012
dominique clause search autocompleteSQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows...CVE-2012-16386.0 MediumSeptember 19, 2012
ricoh dl-10, sr10 ftp server +1 moreStack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5...CVE-2012-5002Public exploitEPSS 31.2%6.8 MediumSeptember 19, 2012
hitachi jp1\/cm2\/network node managerMultiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i before 09-50-03...CVE-2012-50017.5 HighSeptember 19, 2012
blueteck witze addonSQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal...CVE-2012-5000Public exploit7.5 HighSeptember 19, 2012
mercurycom mr804, mr804 firmware +1 moreMercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial...CVE-2012-4999Public exploit6.1 MediumSeptember 19, 2012
starcmsCross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to...CVE-2012-4998Public exploit4.3 MediumSeptember 19, 2012
anecmsDirectory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include...CVE-2012-4997Public exploit7.5 HighSeptember 19, 2012
rivetcode rivettrackerMultiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to...CVE-2012-4996Public exploit7.5 HighSeptember 19, 2012
limesurveyCross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91...CVE-2012-49954.3 MediumSeptember 19, 2012
limesurveySQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows...CVE-2012-49946.5 MediumSeptember 19, 2012
rivetcode rivettrackertorrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which...CVE-2012-4993Public exploit7.5 HighSeptember 19, 2012
flashfxpMultiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to...CVE-2012-4992Public exploitEPSS 17.7%9.0 HighSeptember 19, 2012
apache wicketCross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1...CVE-2012-33734.3 MediumSeptember 19, 2012
oscommerce online merchant, paypal website payments standard module +1 moreThe PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant...CVE-2012-29915.0 MediumSeptember 19, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open