CVEs published in October 2012
549 vulnerabilities, 90 critical, 3 exploited.
- ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreIBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business...5.8 Medium
- hp ibrix, ibrix x9300, ibrix x9320 +1 more +3 moreUnspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX X9000 Storage allows...5.0 Medium
- broadcom license softwareCA License (aka CA Licensing) before 1.90.03 allows local users to modify or create arbitrary...7.2 High
- broadcom license softwareCA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which...7.2 High
- ocportalOpen redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to...5.8 Medium
- mf gig calendar project gig calendarCross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows...4.3 Medium
- eucalyptusEucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services...3.5 Low
- eucalyptusEucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services...6.5 Medium
- eucalyptusThe Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying...5.0 Medium
- nextbbsCross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject...4.3 Medium
- nextbbsMultiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to...7.5 High
- nextbbsuser.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator...7.5 High
- ocportalDirectory traversal vulnerability in catalogue_file.php in ocPortal before 7.1.6 allows remote...5.0 Medium
- ocportalMultiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal before 7.1.6...4.3 Medium
- michael biebl policykitPolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the...6.9 Medium
- luke herrington stickynoteCross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal...2.1 Low
- luke herrington stickynoteCross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for...4.3 Medium
- oneorzero action and information management systemCross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and...4.3 Medium
- mediafire mod quick formCross-site scripting (XSS) vulnerability in the Quickl Form component for Joomla! allows remote...4.3 Medium
- jessgramp minicmsminiCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted (1)...7.5 High
- harmistechnology com jesubmitUnspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for Joomla!...7.5 High
- wordpress slideshow gallery2Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin...4.3 Medium
- tincan phplistCross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and...4.3 Medium
- peel shoppingSQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote...7.5 High
- peel shoppingMultiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote...4.3 Medium
- eliteweaver xclick cartCross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows...4.3 Medium
- vbadvanced cmpsPHP remote file inclusion vulnerability in vb/includes/vba_cmps_include_bottom.php in vBadvanced...7.5 High
- crawlability vbseoThe proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2,...7.5 High
- ivano binetti wolf cmsMultiple cross-site scripting (XSS) vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75...4.3 Medium
- wolfcms wolf cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow...6.8 Medium
- commerceguys commerceMultiple cross-site scripting (XSS) vulnerabilities in product/commerce_product.module in the...3.5 Low
- athemeThe myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0...6.0 Medium
- sysprogs wincdemuBazisVirtualCDBus.sys in WinCDEmu 3.6 allows local users to cause a denial of service (system...2.1 Low
- ibm aix, vios +1 morefuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k...2.1 Low
- ibm websphere commerceUnspecified vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 through 7.0.0.6...5.0 Medium
- ibm rational business developerIBM Rational Business Developer 8.x before 8.0.1.4 allows remote attackers to obtain potentially...5.0 Medium
- emerson deltavBuffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause...5.0 Medium
- ibm rational team concertMultiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM...6.8 Medium
- fedoraproject 389 directory server389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn...6.0 Medium
- smartyCross-site Scripting in SmartyException4.3 Medium
- optipngUse-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow...7.5 High
- gnome gnome-shellThe gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and...6.8 Medium
- guac-dev guacamole, fedoraproject fedora +1 moreStack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole...7.5 High
- david king vinoVino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by...5.0 Medium
- drupalDrupal improper access restrictions4.0 Medium
- drupalThe image module in Drupal 7.x before 7.14 does not properly check permissions when caching...5.0 Medium
- drupalThe forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished...4.0 Medium
- drupalAlgorithmic complexity vulnerability in the _filter_url function in the text filtering system ...3.5 Low
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before...4.3 Medium