Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
October

CVEs published in October 2012

549 vulnerabilities, 90 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

irfanviewHeap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary...CVE-2011-5233Public exploit4.3 MediumOctober 25, 2012
seotoasterMultiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core...CVE-2011-5230Public exploit7.5 HighOctober 25, 2012
apprainSQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0...CVE-2011-5229Public exploit7.5 HighOctober 25, 2012
apprainCross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF...CVE-2011-5228Public exploit4.3 MediumOctober 25, 2012
enterasys netsightStack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management...CVE-2011-5227Public exploitEPSS 77.0%10.0 HighOctober 25, 2012
trioniclabs sentinelCross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel plugin...CVE-2011-52266.8 MediumOctober 25, 2012
trioniclabs sentinelCross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0...CVE-2011-52254.3 MediumOctober 25, 2012
trioniclabs sentinelSQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to...CVE-2011-52247.5 HighOctober 25, 2012
cactiCross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows...CVE-2011-5223Fix available4.3 MediumOctober 25, 2012
scripte24shop php flirt-projektSQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows...CVE-2011-5222Public exploit7.5 HighOctober 25, 2012
websvnCross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2...CVE-2011-52214.3 MediumOctober 25, 2012
cristopher shi php-scmsCross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8...CVE-2011-52204.3 MediumOctober 25, 2012
mpdf1 mpdfDirectory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote...CVE-2011-5219Public exploit5.0 MediumOctober 25, 2012
neubivljiv dota openstatsSQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to...CVE-2011-5218Public exploit7.5 HighOctober 25, 2012
hitachi jp1\/serverconductor\/deploymentmanager, serverconductor\/deploymentmanager +1 moreDirectory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor...CVE-2011-52175.0 MediumOctober 25, 2012
troyef scorm cloud, wordpress +1 moreSQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for...CVE-2011-52167.5 HighOctober 25, 2012
2daybiz video community portal scriptSQL injection vulnerability in index.php in Video Community Portal allows remote attackers to...CVE-2011-52157.5 HighOctober 25, 2012
browsercrmMultiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow...CVE-2011-5214Public exploit4.3 MediumOctober 25, 2012
browsercrmMultiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers...CVE-2011-5213Public exploit7.5 HighOctober 25, 2012
cisco webex recording format playerHeap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32...CVE-2012-39419.3 HighOctober 25, 2012
cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28...CVE-2012-39409.3 HighOctober 25, 2012
cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28...CVE-2012-39399.3 HighOctober 25, 2012
cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28...CVE-2012-39389.3 HighOctober 25, 2012
cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28...CVE-2012-39379.3 HighOctober 25, 2012
cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28...CVE-2012-39369.3 HighOctober 25, 2012
microsoft excel, excel viewer, office +2 moreMicrosoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow...CVE-2012-5672Public exploitEPSS 12.5%4.3 MediumOctober 25, 2012
phpmyadminphpMyAdmin Unsafe Fetching of Javascript CodeCVE-2012-5368Fix available4.3 MediumOctober 25, 2012
phpmyadminphpMyAdmin multiple cross-site scripting vulnerabilitiesCVE-2012-5339Fix available3.5 LowOctober 25, 2012
apache ofbizUnspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10...CVE-2012-350610.0 HighOctober 25, 2012
zoner antivirus freeThe Zoner AntiVirus Free application for Android does not verify that the server hostname matches...CVE-2012-54564.3 MediumOctober 24, 2012
videousermanuals white-label-cmsCross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5...CVE-2012-5388Public exploit3.5 LowOctober 24, 2012
videousermanuals white-label-cmsCross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin...CVE-2012-5387Public exploit6.8 MediumOctober 24, 2012
tibco formvineThe server in TIBCO Formvine 3.1.x and 3.2.x before 3.2.1 does not properly implement access...CVE-2012-53027.5 HighOctober 24, 2012
adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary...CVE-2012-527310.0 HighOctober 23, 2012
adobe shockwave playerArray index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute...CVE-2012-417610.0 HighOctober 23, 2012
adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary...CVE-2012-417510.0 HighOctober 23, 2012
adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary...CVE-2012-417410.0 HighOctober 23, 2012
adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary...CVE-2012-417310.0 HighOctober 23, 2012
adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary...CVE-2012-417210.0 HighOctober 23, 2012
viewvc, debian linux +1 moreCross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row...CVE-2012-45334.3 MediumOctober 23, 2012
cups-pk-helper project cups-pk-helpercups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile...CVE-2012-4510Fix available5.8 MediumOctober 23, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1...CVE-2012-54554.3 MediumOctober 22, 2012
atutor acontentuser/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access,...CVE-2012-54546.5 MediumOctober 22, 2012
atutor acontentSQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1...CVE-2012-5453Public exploit6.5 MediumOctober 22, 2012
intelliants subrion cmsMultiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers...CVE-2012-5452Public exploit4.3 MediumOctober 22, 2012
atutor acontentMultiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor...CVE-2012-51694.3 MediumOctober 22, 2012
atutor acontentATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or...CVE-2012-51687.5 HighOctober 22, 2012
atutor acontentMultiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to...CVE-2012-5167Public exploit7.5 HighOctober 22, 2012
openxSQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823...CVE-2012-49907.5 HighOctober 22, 2012
openxCross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before...CVE-2012-4989Public exploit4.3 MediumOctober 22, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open