Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
October

CVEs published in October 2012

549 vulnerabilities, 90 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

k5n webcalendarCross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote...CVE-2012-08464.3 MediumOctober 8, 2012
xavi x7968Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html...CVE-2012-5323Public exploit6.8 MediumOctober 8, 2012
xavi x7968Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to...CVE-2012-5322Public exploit4.3 MediumOctober 8, 2012
tiki tikiwiki cms\/groupwaretiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary...CVE-2012-5321Public exploitEPSS 13.8%5.8 MediumOctober 8, 2012
sagem f\@st 2604, f\@st 2604 firmware +1 moreCross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B...CVE-2012-5320Public exploit6.8 MediumOctober 8, 2012
dlink dcs-2000, dcs-5300, dcs-900 +2 moreCross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000...CVE-2012-5319Public exploit6.8 MediumOctober 8, 2012
socialcmsMultiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote...CVE-2012-1416Public exploit6.8 MediumOctober 8, 2012
dlink dsl-2640b, dsl-2640b firmware +1 moreCross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4...CVE-2012-1308Public exploit6.8 MediumOctober 8, 2012
bernhard wymann torcs, speed-dreams speed dreams +1 moreStack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car...CVE-2012-1189Public exploitFix available9.3 HighOctober 8, 2012
backwpupMultiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress...CVE-2011-52085.0 MediumOctober 8, 2012
backwpupPHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2...CVE-2011-4342Public exploitEPSS 10.7%7.5 HighOctober 8, 2012
kishore asokan kish guest posting pluginUnrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest...CVE-2012-5318Public exploit6.8 MediumOctober 8, 2012
bigware shopSQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote...CVE-2012-53177.5 HighOctober 8, 2012
barracudanetworks spam \& virus firewall 600, spam \& virus firewall 600 firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600...CVE-2012-53163.5 LowOctober 8, 2012
php ireport project ireportMultiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to...CVE-2012-5315Public exploit4.3 MediumOctober 8, 2012
heikki hokkanen viewgitCross-site scripting (XSS) vulnerability in ViewGit 0.0.6 and earlier allows remote attackers to...CVE-2012-53144.3 MediumOctober 8, 2012
snitz communications forums 2000SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute...CVE-2012-5313Public exploit7.5 HighOctober 8, 2012
tribiq cmsSQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL...CVE-2012-5312Public exploit7.5 HighOctober 8, 2012
getshopped wp e-commerceSQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows...CVE-2012-53107.5 HighOctober 8, 2012
kishore asokan kish guest posting pluginUnrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest...CVE-2012-1125Public exploitEPSS 11.6%6.8 MediumOctober 8, 2012
ibm lotus notes travelerservlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly...CVE-2012-53096.8 MediumOctober 8, 2012
ibm lotus notes travelerCross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler...CVE-2012-53086.8 MediumOctober 8, 2012
ibm lotus notes travelerCross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8...CVE-2012-53072.6 LowOctober 8, 2012
ibm lotus notes travelerMultiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM...CVE-2012-48254.3 MediumOctober 8, 2012
ibm lotus notes travelerOpen redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3...CVE-2012-48245.8 MediumOctober 8, 2012
spamtitan webtitanDirectory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote...CVE-2011-4640Public exploit4.0 MediumOctober 8, 2012
spamtitan webtitanThe (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60...CVE-2011-46396.5 MediumOctober 8, 2012
spamtitan webtitanMultiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers...CVE-2011-46387.5 HighOctober 8, 2012
vwar virtual wararticle.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to cause a denial of...CVE-2010-52795.0 MediumOctober 8, 2012
vwar virtual warVirtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password...CVE-2010-50676.8 MediumOctober 8, 2012
vwar virtual warThe createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6...CVE-2010-50664.3 MediumOctober 8, 2012
vwar virtual warpopup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member...CVE-2010-50655.0 MediumOctober 8, 2012
vwar virtual warMultiple cross-site scripting (XSS) vulnerabilities in Virtual War (aka VWar) 1.6.1 R2 allow...CVE-2010-50644.3 MediumOctober 8, 2012
vwar virtual warSQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote...CVE-2010-5063Public exploit7.5 HighOctober 8, 2012
w1.fi hostapdHeap-based buffer overflow in the eap_server_tls_process_fragment function in...CVE-2012-4445Fix available4.3 MediumOctober 8, 2012
bacula, debian linux +1 moreThe dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce...CVE-2012-4430Fix available4.0 MediumOctober 8, 2012
plume-cms plume cmsCross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and...CVE-2012-1414Public exploit6.8 MediumOctober 7, 2012
joomla joomla\!Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote...CVE-2011-49115.0 MediumOctober 7, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! before 1.5.12 allows remote attackers to...CVE-2011-49104.3 MediumOctober 7, 2012
joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote...CVE-2011-4909Public exploit4.3 MediumOctober 7, 2012
frii proc\ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is...CVE-2011-4363Fix available2.6 LowOctober 7, 2012
modx revolutionDirectory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx...CVE-2010-5278Public exploitEPSS 18.6%4.3 MediumOctober 7, 2012
karim ratib views bulk operationsUnspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows...CVE-2010-52774.9 MediumOctober 7, 2012
memcache project memcacheThe Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly...CVE-2010-52764.3 MediumOctober 7, 2012
memcache project memcacheCross-site scripting (XSS) vulnerability in memcache_admin in the Memcache module 5.x before 5.x...CVE-2010-52754.3 MediumOctober 7, 2012
google androidThe Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with...CVE-2011-3918Public exploit7.8 HighOctober 7, 2012
dlink camera stream client activex control, dcs-5605 ptz ip network camera +1 moreStack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream...CVE-2012-5306Public exploitEPSS 12.1%9.3 HighOctober 6, 2012
directadminCross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows...CVE-2012-53054.3 MediumOctober 6, 2012
yuriy v semenikhin yvs image galleryStatic code injection vulnerability in administration/install.php in YVS Image Gallery allows...CVE-2012-53047.5 HighOctober 6, 2012
postgresql, postgresql jdbc driver +1 moreUnescaped parameters in the PostgreSQL JDBC driverCVE-2012-1618Fix available7.5 HighOctober 6, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open