Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

dariusz handzlik vertrigoservCross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote...CVE-2012-5102Public exploit4.3 MediumSeptember 23, 2012
jextensions je poll componentSQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows...CVE-2012-51017.5 HighSeptember 23, 2012
luizpicanco hserverDirectory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary...CVE-2012-5100Public exploit5.0 MediumSeptember 23, 2012
phpb2bCross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote...CVE-2012-5099Public exploit4.3 MediumSeptember 23, 2012
j waite php-x-linksMultiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to...CVE-2012-5098Public exploit7.5 HighSeptember 23, 2012
steveyolam tinyguestbookMultiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to...CVE-2011-52017.5 HighSeptember 23, 2012
dedecmsMultiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to...CVE-2011-5200Public exploit7.5 HighSeptember 23, 2012
steveyolam tinyguestbookCross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to...CVE-2011-51994.3 MediumSeptember 23, 2012
neturf ecommerce shopping cartSQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote...CVE-2011-51987.5 HighSeptember 23, 2012
public knowledge project open harvester systemsCross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge...CVE-2011-5197Public exploit6.8 MediumSeptember 23, 2012
public knowledge project open journal systemsCross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge...CVE-2011-5196Public exploit6.8 MediumSeptember 23, 2012
public knowledge project open conference systemsCross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge...CVE-2011-5195Public exploit6.8 MediumSeptember 23, 2012
phpace samswhoisCross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois...CVE-2011-51944.3 MediumSeptember 23, 2012
phpace samswhoisCross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois...CVE-2011-5193Public exploit2.6 LowSeptember 23, 2012
blairwilliams pretty link lite pluginCross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5...CVE-2011-51924.3 MediumSeptember 23, 2012
blairwilliams pretty link lite pluginCross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5...CVE-2011-51914.3 MediumSeptember 23, 2012
oracle database server, primavera p6 enterprise project portfolio management +1 moreThe authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11...CVE-2012-3137Public exploitEPSS 31.4%6.4 MediumSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers...CVE-2012-2557EPSS 19.5%9.3 HighSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2012-2548EPSS 19.5%9.3 HighSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2012-2546EPSS 20.2%9.3 HighSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to...CVE-2012-1529EPSS 20.2%9.3 HighSeptember 21, 2012
apple iphone osWebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause...CVE-2012-37476.8 MediumSeptember 20, 2012
apple iphone osUIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which...CVE-2012-37464.3 MediumSeptember 20, 2012
apple iphone osOff-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of...CVE-2012-37455.0 MediumSeptember 20, 2012
apple iphone osTelephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender...CVE-2012-37445.0 MediumSeptember 20, 2012
apple iphone osThe System Logs implementation in Apple iOS before 6 does not restrict /var/log access by...CVE-2012-37435.0 MediumSeptember 20, 2012
apple iphone osSafari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character...CVE-2012-37425.0 MediumSeptember 20, 2012
apple iphone osThe Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly...CVE-2012-37411.9 LowSeptember 20, 2012
apple iphone osThe Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state,...CVE-2012-37402.1 LowSeptember 20, 2012
apple iphone osThe Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to...CVE-2012-37392.1 LowSeptember 20, 2012
apple iphone osThe Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not...CVE-2012-37383.6 LowSeptember 20, 2012
apple iphone osThe Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing,...CVE-2012-37372.1 LowSeptember 20, 2012
apple iphone osThe Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to...CVE-2012-37364.6 MediumSeptember 20, 2012
apple iphone osThe Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide...CVE-2012-37352.1 LowSeptember 20, 2012
apple iphone osOffice Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which...CVE-2012-37341.9 LowSeptember 20, 2012
apple iphone osMessages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not...CVE-2012-37334.3 MediumSeptember 20, 2012
apple iphone osMail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address,...CVE-2012-37326.4 MediumSeptember 20, 2012
apple iphone osMail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail...CVE-2012-37312.1 LowSeptember 20, 2012
apple iphone osMail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which...CVE-2012-37304.3 MediumSeptember 20, 2012
apple iphone osThe Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6...CVE-2012-37291.9 LowSeptember 20, 2012
apple iphone osThe kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet...CVE-2012-37286.9 MediumSeptember 20, 2012
apple iphone osBuffer overflow in the IPsec component in Apple iOS before 6 allows remote attackers to execute...CVE-2012-37276.8 MediumSeptember 20, 2012
apple iphone osDouble free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute...CVE-2012-37266.8 MediumSeptember 20, 2012
apple iphone osThe DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets...CVE-2012-37253.3 LowSeptember 20, 2012
apple iphone osCFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which...CVE-2012-37245.0 MediumSeptember 20, 2012
apple mac os x, mac os x server +1 moreApple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor...CVE-2012-37234.6 MediumSeptember 20, 2012
apple mac os x, iphone os, mac os x server +2 moreThe Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6...CVE-2012-37226.8 MediumSeptember 20, 2012
apple mac os xProfile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the...CVE-2012-37215.0 MediumSeptember 20, 2012
apple mac os xMobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes...CVE-2012-37204.3 MediumSeptember 20, 2012
apple mac os x, mac os x server +1 moreMail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows...CVE-2012-37196.8 MediumSeptember 20, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open