Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
October

CVEs published in October 2012

549 vulnerabilities, 90 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

hans nilsson video filterCross-site scripting (XSS) vulnerability in video_filter.codecs.inc in the Video Filter module 6...CVE-2012-16344.3 MediumOctober 6, 2012
lingotek ray enterprise translationMultiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1...CVE-2012-16243.5 LowOctober 6, 2012
aidanlister regcodeThe Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the...CVE-2012-16235.0 MediumOctober 6, 2012
ez publishUnspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and...CVE-2012-15657.5 HighOctober 6, 2012
yuriy v semenikhin yvs image galleryCross-site scripting (XSS) vulnerability in administration/create_album.php in YVS Image Gallery...CVE-2012-15644.3 MediumOctober 6, 2012
apprainUnrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and...CVE-2012-1153Public exploitEPSS 32.4%6.8 MediumOctober 6, 2012
impresscmsDirectory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3...CVE-2012-09876.0 MediumOctober 6, 2012
impresscmsMultiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1...CVE-2012-09864.3 MediumOctober 6, 2012
nikias bassen usbmuxdHeap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1...CVE-2012-0065Fix available4.6 MediumOctober 6, 2012
impresspages cmsImpressPages CMS eval injection vulnerabilityCVE-2011-4932Fix available7.5 HighOctober 6, 2012
monkey-project monkeyMonkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink...CVE-2012-53036.9 MediumOctober 5, 2012
monkey-project monkeyMonkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during...CVE-2012-44424.7 MediumOctober 5, 2012
pythonPython before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash...CVE-2012-1150Fix available5.0 MediumOctober 5, 2012
pythonSimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...CVE-2012-0845Fix available5.0 MediumOctober 5, 2012
vmware capacityiqDirectory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read...CVE-2012-50515.0 MediumOctober 5, 2012
vmware vcenter operationsCross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps)...CVE-2012-50504.3 MediumOctober 5, 2012
vmware movie decoderUntrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows...CVE-2012-48976.9 MediumOctober 5, 2012
monkey-project monkeyMonkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI...CVE-2012-44436.9 MediumOctober 5, 2012
sumatrapdfreader sumatrapdfHeap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary...CVE-2012-48969.3 HighOctober 5, 2012
sumatrapdfreader sumatrapdfHeap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary...CVE-2012-48959.3 HighOctober 5, 2012
google sketchupGoogle SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to...CVE-2012-48949.3 HighOctober 5, 2012
finalbeta mywebsearchCross-site scripting (XSS) vulnerability in Final Beta Laboratory MyWebSearch before 1.23 allows...CVE-2012-40184.3 MediumOctober 5, 2012
cerberusftp ftp serverThe default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH...CVE-2012-53015.0 MediumOctober 4, 2012
wiresharkBuffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector...CVE-2012-5240Fix available5.8 MediumOctober 4, 2012
wiresharkepan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect...CVE-2012-5238Fix available3.3 LowOctober 4, 2012
wiresharkThe dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8...CVE-2012-5237Fix available3.3 LowOctober 4, 2012
cerberusftp ftp serverMultiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP...CVE-2012-29996.8 MediumOctober 4, 2012
mystorexpress tienda virtualSQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows...CVE-2012-53007.5 HighOctober 4, 2012
mavili guestbook project guestbookMavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and...CVE-2012-52997.5 HighOctober 4, 2012
mavili guestbook project guestbookMavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with...CVE-2012-52985.0 MediumOctober 4, 2012
mavili guestbook project guestbookSQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows...CVE-2012-52977.5 HighOctober 4, 2012
mavili guestbook project guestbookMultiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November...CVE-2012-52964.3 MediumOctober 4, 2012
fusetalkCross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows...CVE-2012-5295Public exploit4.3 MediumOctober 4, 2012
mystorexpress tienda virtualSQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote...CVE-2012-5294Public exploit7.5 HighOctober 4, 2012
thecartpressCross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin...CVE-2011-5207Public exploit4.3 MediumOctober 4, 2012
rapidleechCross-site scripting (XSS) vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399...CVE-2011-52064.3 MediumOctober 4, 2012
rapidleechCross-site scripting (XSS) vulnerability in audl.php in Rapidleech 2.3 rev42 SVN r358, rev43 SVN...CVE-2011-52054.3 MediumOctober 4, 2012
akiva webboardAkiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive...CVE-2011-5204Public exploit1.9 LowOctober 4, 2012
akiva webboardSQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote...CVE-2011-5203Public exploit7.5 HighOctober 4, 2012
redgraphic sapid cmsMultiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote...CVE-2012-5293Public exploit7.5 HighOctober 4, 2012
atar2b cmsMultiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute...CVE-2012-5292Public exploit7.5 HighOctober 4, 2012
possesports posse softball director cmsSQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to...CVE-2012-5291Public exploit7.5 HighOctober 4, 2012
wcs4web easywebrealestateMultiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute...CVE-2012-52907.5 HighOctober 4, 2012
ploggerMultiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute...CVE-2012-52897.5 HighOctober 4, 2012
accomplishtechnology phpmydirectorySQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to...CVE-2012-5288Public exploit7.5 HighOctober 4, 2012
dart powertcp activexStack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP...CVE-2012-3819Public exploit5.0 MediumOctober 4, 2012
hp network node manager iUnspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to...CVE-2012-32675.0 MediumOctober 4, 2012
linux kernel, redhat enterprise linux eus +1 moreRace condition in the IP implementation in the Linux kernel before 3.0 might allow remote...CVE-2012-3552Fix available5.9 MediumOctober 3, 2012
linux kernelUse-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel...CVE-2012-3510Fix available5.6 MediumOctober 3, 2012
linux kernelThe Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages...CVE-2012-3520Fix available1.9 LowOctober 3, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open