Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
November

CVEs published in November 2012

447 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

gluster glusterfsGlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary...CVE-2012-4417Fix available3.6 LowNovember 18, 2012
patterninsight pattern insightCross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in...CVE-2012-49504.3 MediumNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreAgile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext...CVE-2012-49475.0 MediumNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreAgile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password...CVE-2012-49465.0 MediumNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreAgile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute...CVE-2012-49457.5 HighNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreMultiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander...CVE-2012-494410.0 HighNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and...CVE-2012-49436.8 MediumNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander...CVE-2012-49424.3 MediumNovember 18, 2012
agilefleet fleetcommander, fleetcommander kiosk +1 moreMultiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4...CVE-2012-49417.5 HighNovember 18, 2012
patterninsight pattern insightCross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows...CVE-2012-49383.5 LowNovember 18, 2012
patterninsight pattern insightSession fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote...CVE-2012-49376.8 MediumNovember 18, 2012
patterninsight pattern insightThe web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks...CVE-2012-49366.8 MediumNovember 18, 2012
patterninsight pattern insightCross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3...CVE-2012-49356.8 MediumNovember 18, 2012
novell file reporterDirectory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote...CVE-2012-4959Public exploitEPSS 71.2%10.0 HighNovember 18, 2012
novell file reporterDirectory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote...CVE-2012-4958Public exploitEPSS 73.5%7.8 HighNovember 18, 2012
novell file reporterAbsolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote...CVE-2012-4957Public exploitEPSS 67.6%7.8 HighNovember 18, 2012
novell file reporterHeap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers...CVE-2012-4956EPSS 37.7%10.0 HighNovember 18, 2012
pgbouncer project pgbouncerThe add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote...CVE-2012-4575Fix available5.0 MediumNovember 18, 2012
tom wilkason snackampSnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a...CVE-2012-5917Public exploit4.3 MediumNovember 17, 2012
neocrome seditioNeocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct...CVE-2012-59165.0 MediumNovember 17, 2012
neocrome seditioNeocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information...CVE-2012-59155.0 MediumNovember 17, 2012
neocrome seditioMultiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system...CVE-2012-59142.6 LowNovember 17, 2012
wordpress integrator project integratorCross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module...CVE-2012-5913Public exploit4.3 MediumNovember 17, 2012
pico picopublisherMultiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute...CVE-2012-5912Public exploit7.5 HighNovember 17, 2012
b2evolutionCross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote...CVE-2012-59114.3 MediumNovember 17, 2012
b2evolutionSQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote...CVE-2012-59106.5 MediumNovember 17, 2012
mybbSQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6...CVE-2012-5909Public exploit7.5 HighNovember 17, 2012
mybbCross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka...CVE-2012-5908Public exploit4.3 MediumNovember 17, 2012
tomatocartDirectory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier...CVE-2012-5907Public exploit5.0 MediumNovember 17, 2012
morequick greenbrowserMultiple cross-site scripting (XSS) vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow...CVE-2012-59064.3 MediumNovember 17, 2012
elif keir knftpdBuffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service ...CVE-2012-5905Public exploit4.0 MediumNovember 17, 2012
irfanviewHeap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary...CVE-2012-59046.8 MediumNovember 17, 2012
simple machines smfCross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote...CVE-2012-5903Public exploit4.3 MediumNovember 17, 2012
dflabs ptkCross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows...CVE-2012-59024.3 MediumNovember 17, 2012
dflabs ptkDFLabs PTK 1.0.5 stores data files with predictable names under the web document root with...CVE-2012-59015.0 MediumNovember 17, 2012
samedia landshopMultiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to...CVE-2012-5900Public exploit7.5 HighNovember 17, 2012
samedia landshopCross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2...CVE-2012-5899Public exploit4.3 MediumNovember 17, 2012
samedia landshopCross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers...CVE-2012-5898Public exploit6.8 MediumNovember 17, 2012
quest intrustThe (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest...CVE-2012-5897Public exploit9.3 HighNovember 17, 2012
quest intrustThe Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and...CVE-2012-5896Public exploitEPSS 68.7%10.0 HighNovember 17, 2012
irodsMultiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors.CVE-2012-589510.0 HighNovember 17, 2012
havalite cmsSQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote...CVE-2012-5894Public exploit7.5 HighNovember 17, 2012
havalite cmsUnrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier...CVE-2012-58936.8 MediumNovember 17, 2012
havalite cmsHavalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient...CVE-2012-58925.0 MediumNovember 17, 2012
dalbumMultiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build...CVE-2012-5891Public exploit6.8 MediumNovember 17, 2012
stanislas rolland sr feuser registerFront End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwordsCVE-2012-5890Fix available5.0 MediumNovember 17, 2012
alex kellner powermailpowermail extension for TYPO3 has Cross-site Scripting vulnerabilityCVE-2012-5889Fix available4.3 MediumNovember 17, 2012
benjamin mack seo basicsBasic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site ScriptingCVE-2012-5888Fix available4.3 MediumNovember 17, 2012
apache tomcatImproper Authentication in Apache TomcatCVE-2012-5887Fix availableEPSS 12.1%5.0 MediumNovember 17, 2012
apache tomcatImproper Authentication in Apache TomcatCVE-2012-5886Fix available5.0 MediumNovember 17, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open