CVEs published in November 2012
447 vulnerabilities, 76 critical, 1 exploited.
- cybersource module project cybersource, ubercart +1 moreThe CyberSource module in Ubercart does not verify that the server hostname matches a domain name...5.8 Medium
- irata authorize.net module, ubercart +1 moreThe Authorize.Net module in Ubercart does not verify that the server hostname matches a domain...5.8 Medium
- paypal, ubercart +1 moreThe PayPal module in Ubercart does not verify that the server hostname matches a domain name in...5.8 Medium
- prestashop, prestashop ebay +1 moreThe PayPal module in PrestaShop does not verify that the server hostname matches a domain name in...5.8 Medium
- prestashop ebay module, prestashop +1 moreThe eBay module in PrestaShop does not verify that the server hostname matches a domain name in...5.8 Medium
- prestashop, presto-changeo canadapost +1 moreThe Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname...5.8 Medium
- oscommerce, paypal payflow pro express checkout +1 moreThe PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a...5.8 Medium
- brian burton paypal pro payflow module, oscommerce +1 moreThe PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a...5.8 Medium
- oscommerce, paypal pro +1 moreThe PayPal Pro module in osCommerce does not verify that the server hostname matches a domain...5.8 Medium
- akunamachata paypal express module, oscommerce +1 moreThe PayPal Express module in osCommerce does not verify that the server hostname matches a domain...5.8 Medium
- moneybookers, oscommerce +1 moreThe MoneyBookers module in osCommerce does not verify that the server hostname matches a domain...5.8 Medium
- harald ponce de leon authorize.net, oscommerce +1 moreThe Authorize.Net module in osCommerce does not verify that the server hostname matches a domain...5.8 Medium
- oscommerce, sagepay sage pay direct module +1 moreThe Sage Pay Direct module in osCommerce does not verify that the server hostname matches a...5.8 Medium
- paypal invoicingPayPal Invoicing does not verify that the server hostname matches a domain name in the subject's...5.8 Medium
- paypal payments standardPayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a...5.8 Medium
- paypal payments standardPayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname...5.8 Medium
- paypal ipnThe PayPal IPN utility does not verify that the server hostname matches a domain name in the...5.8 Medium
- paypal merchant sdkThe PayPal merchant SDK does not verify that the server hostname matches a domain name in the...5.8 Medium
- apache cxf** DISPUTED ** The wsdl_first_https sample code in distribution/src/main/release/samples...5.8 Medium
- apache axis2Apache Axis2 has Improper Input Validation5.8 Medium
- apache activemq, axis, paypal mass pay +2 more +4 moreMan-in-the-middle attack in Apache Axis5.8 Medium
- amazon flexible payments serviceAmazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname...5.8 Medium
- amazon elastic load balancingAmazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain...5.8 Medium
- amazon merchant sdkThe Amazon merchant SDK does not verify that the server hostname matches a domain name in the...5.8 Medium
- apache libcloudApache Libcloud vulnerable to certificate impersonation5.9 Medium
- simon brown pebbleOpen redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to...5.8 Medium
- realnetworks realplayerStack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote...6.8 Medium
- apache httpclient, canonical ubuntu linux +1 moreImproper Certificate Validation in Apache Commons HttpClient5.8 Medium
- libproxy project libproxyHeap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x...10.0 High
- apple iphone osThe Passcode Lock implementation in Apple iOS before 6.0.1 does not properly manage the lock...3.6 Low
- apple iphone osThe extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses...5.0 Medium
- apple safari, iphone os +1 moreRace condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote...5.1 Medium
- irfanview flashpix pluginDouble free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3...6.8 Medium
- morbus iff activismThe Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the ...7.5 High
- devsaran elegant themeCross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x...2.1 Low
- roy baxter better revisionsCross-site scripting (XSS) vulnerability in the administrative interface in the Better Revisions...2.1 Low
- boombatower subuserThe Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions...4.0 Medium
- boombatower subuserCross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal...6.8 Medium
- cisco prime data center network managerCisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to...10.0 High
- cisco unified meetingplaceBuffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before...7.8 High
- justin dodge hotblocksCross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the...2.1 Low
- justin dodge hotblocksThe Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the...3.5 Low
- tp-link tl-wr841n, tl-wr841n firmware +1 moreDirectory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N...7.8 High
- siemens sipass integratedAscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly...10.0 High
- ge intelligent platforms proficy real-time information portalrifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time...10.0 High
- ge intelligent platforms proficy real-time information portalrifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time...10.0 High
- ge intelligent platforms proficy real-time information portalrifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time...10.0 High