CVEs published in October 2012

549 vulnerabilities, 90 critical, 3 exploited.

• gecad axigen free mail server Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail... CVE-2012-4940 Public exploit EPSS 85.4% 6.4 MediumOctober 31, 2012
• solarwinds orion network performance monitor, ip address manager web interface +1 more Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before... CVE-2012-4939 Public exploit 4.3 MediumOctober 31, 2012
• xen The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk ... CVE-2012-4544 Fix available 2.1 LowOctober 31, 2012
• joomla joomla\! Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the... CVE-2012-4532 4.3 MediumOctober 31, 2012
• joomla joomla\! Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to... CVE-2012-4531 4.3 MediumOctober 31, 2012
• nancy wichmann announcements The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with... CVE-2012-4500 3.5 LowOctober 31, 2012
• matthias hutterer email The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7... CVE-2012-4499 5.0 MediumOctober 31, 2012
• inclind custom pub Cross-site scripting (XSS) vulnerability in the Custom Publishing Options module 6.x-1.x before 6... CVE-2012-4496 2.1 LowOctober 31, 2012
• mime mail module project mimemail The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files... CVE-2012-4495 4.0 MediumOctober 31, 2012
• niif shibb auth The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status... CVE-2012-4494 4.3 MediumOctober 31, 2012
• isaac sukin shorten Multiple cross-site scripting (XSS) vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x... CVE-2012-4492 2.1 LowOctober 31, 2012
• earl dunovant monthly archive by node type The Monthly Archive by Node Type module 6.x for Drupal does not properly check permissions... CVE-2012-4491 5.8 MediumOctober 31, 2012
• ricky morse excluded users Multiple cross-site scripting (XSS) vulnerabilities in the Excluded Users module 6.x-1.x before 6... CVE-2012-4490 4.3 MediumOctober 31, 2012
• mark burdett securelogin Open redirect vulnerability in the securelogin_secure_redirect function in the Secure Login... CVE-2012-4489 5.8 MediumOctober 31, 2012
• location module project location The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly... CVE-2012-4488 5.0 MediumOctober 31, 2012
• manuel garcia galleryformatter Multiple cross-site scripting (XSS) vulnerabilities in the galleryformatter_field_formatter_view... CVE-2012-4485 4.3 MediumOctober 31, 2012
• trexart campaignmonitor Cross-site scripting (XSS) vulnerability in the administrative interface in the Campaign Monitor... CVE-2012-4484 4.3 MediumOctober 31, 2012
• acquia commons The commons_discussion_views_default_views function in modules/features/commons_discussion... CVE-2012-4483 5.0 MediumOctober 31, 2012
• longwaveconsulting ubercart securetrading payment method module The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment... CVE-2012-4482 5.0 MediumOctober 31, 2012
• xen, xen xen-unstable +1 more The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x... CVE-2012-2625 Fix available 2.7 LowOctober 31, 2012
• invisioncommunity invision power board Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP... CVE-2012-5692 Public exploit EPSS 26.0% 10.0 HighOctober 31, 2012
• tomatocart TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows... CVE-2012-4934 3.5 LowOctober 31, 2012
• emc avamar EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client,... CVE-2012-4610 3.3 LowOctober 31, 2012
• laurent destailleur awstats Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. CVE-2012-4547 Fix available 4.3 MediumOctober 31, 2012
• videolan vlc media player Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC... CVE-2012-0023 Fix available 9.3 HighOctober 30, 2012
• cisco catalyst 6500, 5500 series adaptive security appliance, 7600 router +9 more +11 more The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and... CVE-2012-4663 7.1 HighOctober 29, 2012
• cisco catalyst 6500, 5500 series adaptive security appliance, 7600 router +9 more +11 more The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and... CVE-2012-4662 7.1 HighOctober 29, 2012
• cisco catalyst 6500, 5500 series adaptive security appliance, 7600 router +9 more +11 more Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances... CVE-2012-4661 9.0 HighOctober 29, 2012
• cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +8 more +10 more The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and... CVE-2012-4660 7.8 HighOctober 29, 2012
• cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +8 more +10 more The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances ... CVE-2012-4659 7.1 HighOctober 29, 2012
• cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +8 more +10 more The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA... CVE-2012-4643 7.1 HighOctober 29, 2012
• mozilla firefox, seamonkey, thunderbird +10 more +12 more Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2,... CVE-2012-4196 Fix available 6.4 MediumOctober 29, 2012
• mozilla firefox, seamonkey, thunderbird +10 more +12 more The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0... CVE-2012-4195 Fix available 4.3 MediumOctober 29, 2012
• mozilla firefox, seamonkey, thunderbird +10 more +12 more Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2,... CVE-2012-4194 Fix available 4.3 MediumOctober 29, 2012
• videolan vlc media player libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of... CVE-2012-5470 Public exploitFix available 4.3 MediumOctober 26, 2012
• wftpserver wing ftp server Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service ... CVE-2012-4729 6.8 MediumOctober 26, 2012
• apache cloudstack Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make... CVE-2012-4501 10.0 HighOctober 26, 2012
• c61 tokyo bbs Cross-site scripting (XSS) vulnerability in tokyo_bbs.cgi in Come on Girls Interface (CGI) Tokyo... CVE-2012-4019 4.3 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6581 Fix available 4.3 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6580 Fix available 4.3 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6579 Fix available 6.4 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled... CVE-2012-6578 Fix available 4.3 MediumOctober 26, 2012
• exim Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through... CVE-2012-5671 Fix available 6.8 MediumOctober 26, 2012
• bestpractical rt Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0... CVE-2012-4884 Fix available 5.0 MediumOctober 26, 2012
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to... CVE-2012-4734 Fix available 5.0 MediumOctober 26, 2012
• bestpractical rt Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions... CVE-2012-4732 Fix available 6.8 MediumOctober 26, 2012
• bestpractical rtfm FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which... CVE-2012-4731 Fix available 4.0 MediumOctober 26, 2012
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users... CVE-2012-4730 Fix available 3.5 LowOctober 26, 2012
• mnogosearch SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute... CVE-2011-5235 7.5 HighOctober 25, 2012
• scripte24shop social network community SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to... CVE-2011-5234 7.5 HighOctober 25, 2012
• Show olderLoading…