Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
November

CVEs published in November 2012

447 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

guitar-pro guitar proGuitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long...CVE-2012-6048Public exploit5.0 MediumNovember 27, 2012
x7 group chatCross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote...CVE-2012-6047Public exploit6.8 MediumNovember 27, 2012
phpenter php enterStatic code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to...CVE-2012-6046Public exploit10.0 HighNovember 27, 2012
ramui forumCross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta,...CVE-2012-6045Public exploit4.3 MediumNovember 27, 2012
joobi com jstoreDirectory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote...CVE-2010-5286Public exploitEPSS 12.1%10.0 HighNovember 26, 2012
o-dyn collabtiveCross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote...CVE-2010-5285Public exploit6.8 MediumNovember 26, 2012
o-dyn collabtiveMultiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to...CVE-2010-5284Public exploit4.3 MediumNovember 26, 2012
opentext livelink ecmCross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1...CVE-2010-52836.8 MediumNovember 26, 2012
opentext livelink ecmMultiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1...CVE-2010-52824.3 MediumNovember 26, 2012
net4visions ibrowserDirectory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4...CVE-2010-5281Public exploit6.8 MediumNovember 26, 2012
joomla-cbe com cbeDirectory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4...CVE-2010-5280Public exploit7.5 HighNovember 26, 2012
mjsware m-playerM-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.CVE-2012-6044Public exploit4.3 MediumNovember 26, 2012
php-fusionCross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote...CVE-2012-6043Public exploit4.3 MediumNovember 26, 2012
geopainting gpsmapeditGPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash)...CVE-2012-6042Public exploit4.3 MediumNovember 26, 2012
morequick greenbrowserDouble free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is...CVE-2012-6041Public exploit6.8 MediumNovember 26, 2012
convergine file king advanced file managementCross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4...CVE-2012-6040Public exploit4.3 MediumNovember 26, 2012
yabsoft advanced image hosting scriptSQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script,...CVE-2012-6039Public exploit7.5 HighNovember 26, 2012
razorcmsadmin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain...CVE-2012-6038Public exploit6.5 MediumNovember 26, 2012
openvas managerThe send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote...CVE-2012-55207.5 HighNovember 26, 2012
awcm-cms ar web content managerar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be...CVE-2012-24385.0 MediumNovember 26, 2012
awcm-cms ar web content managercookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows...CVE-2012-2437Public exploit5.0 MediumNovember 26, 2012
maharaMultiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before...CVE-2012-60374.3 MediumNovember 24, 2012
lighttpdThe http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote...CVE-2012-5533Public exploitFix availableEPSS 12.0%5.0 MediumNovember 24, 2012
xenThe HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the...CVE-2012-4538Fix available4.9 MediumNovember 24, 2012
ruby-lang rubyThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...CVE-2012-45225.0 MediumNovember 24, 2012
maharaCross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1...CVE-2012-22534.3 MediumNovember 24, 2012
maharaCross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4...CVE-2012-22474.3 MediumNovember 24, 2012
maharaMahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking...CVE-2012-22466.8 MediumNovember 24, 2012
maharaMahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to...CVE-2012-22446.0 MediumNovember 24, 2012
maharaCross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4...CVE-2012-22434.3 MediumNovember 24, 2012
mahara, debian linux +1 moreMahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files...CVE-2012-22399.1 CriticalNovember 24, 2012
ps project management team unity-firefox-extensionUnity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly...CVE-2012-09607.5 HighNovember 24, 2012
remote login service hackers login serviceRemote Login Service (RLS) 1.0.0 does not properly clear account information when switching users...CVE-2012-09592.1 LowNovember 24, 2012
xenThe (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page...CVE-2012-6036Fix available4.4 MediumNovember 23, 2012
xenThe do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does...CVE-2012-6035Fix available6.9 MediumNovember 23, 2012
xenThe (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3)...CVE-2012-6034Fix available4.4 MediumNovember 23, 2012
xenThe do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not...CVE-2012-6033Fix available4.4 MediumNovember 23, 2012
xenMultiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions...CVE-2012-6032Fix available4.9 MediumNovember 23, 2012
xenThe do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local...CVE-2012-6031Fix available4.7 MediumNovember 23, 2012
xenThe do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local...CVE-2012-6030Fix available7.2 HighNovember 23, 2012
tecnick tcexamMultiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in...CVE-2012-46024.3 MediumNovember 23, 2012
tecnick tcexamMultiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote...CVE-2012-46016.0 MediumNovember 23, 2012
citrix xenserver, xen +1 moreThe GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix...CVE-2012-35166.9 MediumNovember 23, 2012
citrix xenserver, xen +1 morePHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM...CVE-2012-3498Fix available5.6 MediumNovember 23, 2012
xen(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS...CVE-2012-3497Fix available6.9 MediumNovember 23, 2012
citrix xenserver, xen +1 moreThe physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2...CVE-2012-3495Fix available6.1 MediumNovember 23, 2012
redhat jboss enterprise data services platformThe Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services...CVE-2012-34314.3 MediumNovember 23, 2012
redhat jboss enterprise portal platform, jboss enterprise brms platform, jboss enterprise soa platform +2 moreJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...CVE-2012-23773.3 LowNovember 23, 2012
redhat jboss enterprise application platform, jboss enterprise brms platform, jboss enterprise soa platform +1 more +3 moreThe JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2...CVE-2012-11674.6 MediumNovember 23, 2012
redhat resteasyExposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2012-0818Fix available5.0 MediumNovember 23, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open