Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

google chrome, opensuse +1 moreSkia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of...CVE-2012-28837.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreFFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers,...CVE-2012-28826.8 MediumSeptember 26, 2012
google chrome, opensuse +1 moreGoogle Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote...CVE-2012-28817.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreRace condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of...CVE-2012-28807.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreGoogle Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM...CVE-2012-28794.3 MediumSeptember 26, 2012
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to...CVE-2012-28787.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreThe extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs,...CVE-2012-28775.0 MediumSeptember 26, 2012
google chrome, opensuse +1 moreBuffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79...CVE-2012-28767.5 HighSeptember 26, 2012
google chromeMultiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229...CVE-2012-28756.8 MediumSeptember 26, 2012
google chrome, opensuse +1 moreSkia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of...CVE-2012-28747.5 HighSeptember 26, 2012
fork-cms fork cmsMultiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote...CVE-2012-51644.3 MediumSeptember 26, 2012
osclassCross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows...CVE-2012-51634.3 MediumSeptember 26, 2012
osclassMultiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow...CVE-2012-51626.5 MediumSeptember 26, 2012
juan ramon osclassDirectory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers...CVE-2012-1617Public exploit6.4 MediumSeptember 26, 2012
fork-cms fork cmsFork CMS Multiple XSS VulnerabilitiesCVE-2012-1188Public exploitFix available4.3 MediumSeptember 26, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to...CVE-2012-11174.3 MediumSeptember 26, 2012
joomla joomla\!SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to...CVE-2012-1116Public exploit7.5 HighSeptember 26, 2012
drupal faqMultiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and...CVE-2012-16464.3 MediumSeptember 25, 2012
juan ramon osclassMultiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes...CVE-2012-0974Public exploit4.3 MediumSeptember 25, 2012
osclassMultiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute...CVE-2012-0973Public exploit7.5 HighSeptember 25, 2012
rsyslogInteger overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in...CVE-2011-4623Fix available2.1 LowSeptember 25, 2012
phpmyadminphpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame...CVE-2012-5159Public exploitEPSS 74.5%7.5 HighSeptember 25, 2012
horde groupware, horde +1 moreHorde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed...CVE-2012-0209Public exploitEPSS 71.9%7.5 HighSeptember 25, 2012
ibm informix dynamic serverStack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11...CVE-2012-33349.0 HighSeptember 25, 2012
ibm db2, db2 connect +1 moreDirectory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before...CVE-2012-33249.0 HighSeptember 25, 2012
ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0...CVE-2012-33113.3 LowSeptember 25, 2012
ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0...CVE-2012-33066.8 MediumSeptember 25, 2012
ibm websphere application serverDirectory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47,...CVE-2012-33056.4 MediumSeptember 25, 2012
ibm websphere application serverThe Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0...CVE-2012-33046.8 MediumSeptember 25, 2012
ibm websphere commerceIBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are...CVE-2012-33002.6 LowSeptember 25, 2012
ibm websphere commerceUnspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature...CVE-2012-329810.0 HighSeptember 25, 2012
ibm websphere mqThe server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1...CVE-2012-21995.0 MediumSeptember 25, 2012
ibm remote supervisor adapter ii firmwareIBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and...CVE-2012-21875.0 MediumSeptember 25, 2012
mylittletools mylittleadminCross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin...CVE-2012-40154.3 MediumSeptember 25, 2012
mcafee email and web securityUnspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote...CVE-2012-40147.8 HighSeptember 25, 2012
hp sitescopeUnspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote...CVE-2012-32647.5 HighSeptember 25, 2012
hp sitescopeUnspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote...CVE-2012-326310.0 HighSeptember 25, 2012
hp sitescopeUnspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote...CVE-2012-326210.0 HighSeptember 25, 2012
hp sitescopeUnspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote...CVE-2012-3261Public exploitEPSS 40.2%10.0 HighSeptember 25, 2012
hp sitescopeUnspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote...CVE-2012-3260Public exploitEPSS 40.2%10.0 HighSeptember 25, 2012
hp sitescopeUnspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote...CVE-2012-3259EPSS 60.2%10.0 HighSeptember 25, 2012
siemens simatic s7-1200 cpu 1211c firmware, simatic s7-1200 cpu 1212c firmware, simatic s7-1200 cpu 1212fc firmware +6 more +8 moreThe Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC...CVE-2012-30374.3 MediumSeptember 25, 2012
fultek wintr scadaDirectory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier...CVE-2012-30117.8 HighSeptember 25, 2012
emc rsa authentication agent, rsa authentication client +1 moreThe authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication...CVE-2012-22878.5 HighSeptember 25, 2012
adobe flash playerInteger overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before...CVE-2012-5054In KEVEPSS 21.2%8.8 HighSeptember 24, 2012
cisco secure desktopThe WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries...CVE-2012-46559.3 HighSeptember 24, 2012
apache cxfRemote web-service operation execution in Apache CXFCVE-2012-3451Fix available4.3 MediumSeptember 24, 2012
sqlitemanagerMultiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers...CVE-2012-5105Public exploit4.3 MediumSeptember 23, 2012
ubbcentral ubb.threadsCross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and...CVE-2012-5104Public exploit4.3 MediumSeptember 23, 2012
dnelubin gelinsguestbookMultiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3...CVE-2012-51034.3 MediumSeptember 23, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open