Overview 16,668 matches · 105 in Waratek scope · 16 protected · 0 exploited · 0 CISA KEV · 679 EPSS ≥ 0.5
16,668matches
105in Waratek scope0.6%
16protected0.1%
0exploited0.0%
0CISA KEV0.0%
679EPSS ≥ 0.54.1%
Protected by Waratek
16
0.1%
Rule in development
0
0.0%
Mitigation candidate
89
0.5%
No exploit published
0
0.0%
Outside Waratek scope
66
0.4%
Not applicable
16,465
98.8%
Withdrawn CVE
32
0.2%
blocked by ARMR today
16
0.1%
partly blocked
0
0.0%
not blocked
16,652
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
16,668
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 2,591 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001480
Mitigation candidate2
Outside Waratek scope4
Not applicable474
Critical4
High219
Medium219
Low38
not blocked480
Working exploit published480
2002545
Mitigation candidate8
Outside Waratek scope4
Not applicable531
Withdrawn CVE2
Critical3
High276
Medium246
Low18
Unknown2
not blocked545
Working exploit published545
2003499
Protected by Waratek1
Mitigation candidate7
Outside Waratek scope2
Not applicable488
Withdrawn CVE1
Critical3
High236
Medium243
Low16
Unknown1
blocked by ARMR today1
not blocked498
Working exploit published499
2004755
Mitigation candidate1
Outside Waratek scope1
Not applicable753
Critical3
High302
Medium414
Low36
not blocked755
Working exploit published755
20051,341
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope4
Not applicable1,327
Withdrawn CVE5
Critical4
High658
Medium622
Low52
Unknown5
blocked by ARMR today1
not blocked1,340
Working exploit published1,341
20062,440
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope7
Not applicable2,425
Withdrawn CVE3
Critical4
High1,197
Medium1,137
Low99
Unknown3
blocked by ARMR today1
not blocked2,439
Working exploit published2,440
20072,495
Protected by Waratek1
Mitigation candidate10
Outside Waratek scope11
Not applicable2,470
Withdrawn CVE3
Critical6
High1,405
Medium1,052
Low29
Unknown3
blocked by ARMR today1
not blocked2,494
Working exploit published2,495
20082,518
Protected by Waratek3
Mitigation candidate9
Outside Waratek scope6
Not applicable2,495
Withdrawn CVE5
Critical4
High1,492
Medium987
Low30
Unknown5
blocked by ARMR today3
not blocked2,515
Working exploit published2,518
20092,591
Protected by Waratek4
Mitigation candidate12
Outside Waratek scope9
Not applicable2,560
Withdrawn CVE6
Critical5
High1,424
Medium1,123
Low33
Unknown6
blocked by ARMR today4
not blocked2,587
Working exploit published2,591
20101,313
Protected by Waratek3
Mitigation candidate11
Outside Waratek scope7
Not applicable1,290
Withdrawn CVE2
Critical6
High730
Medium547
Low28
Unknown2
blocked by ARMR today3
not blocked1,310
Working exploit published1,313
2011691
Protected by Waratek2
Mitigation candidate9
Outside Waratek scope5
Not applicable672
Withdrawn CVE3
Critical1
High380
Medium294
Low13
Unknown3
blocked by ARMR today2
not blocked689
Working exploit published691
2012135
Mitigation candidate6
Outside Waratek scope4
Not applicable125
High51
Medium80
Low4
not blocked135
Working exploit published135
1988199019921994199619982000200220042006200820102012
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2012-1213 | Medium | 2012-02-24 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter. |
| CVE-2012-1211 | Medium | 2012-02-24 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via the filecat parameter. |
| CVE-2012-1210 | High | 2012-02-24 | Not applicable | Working exploit published | SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. |
| CVE-2012-1208 | Medium | 2012-02-24 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) report parameter to blog/settings or (2) error parameter to users/index. |
| CVE-2012-1205 | High | 2012-02-24 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. |
| CVE-2012-0997 | Medium | 2012-02-24 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action. |
| CVE-2012-0996 | Medium | 2012-02-24 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php. |
| CVE-2012-1294 | High | 2012-02-23 | Not applicable | Working exploit published | SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. |
| CVE-2012-0873 | Medium | 2012-02-23 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php. |
| CVE-2012-1226 | High | 2012-02-21 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php. |
| CVE-2012-1225 | High | 2012-02-21 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php. |
| CVE-2012-1224 | Medium | 2012-02-21 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. |
| CVE-2012-1221 | Medium | 2012-02-21 | Not applicable | Working exploit published | Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the File command. |
| CVE-2012-1220 | Medium | 2012-02-21 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password. |
| CVE-2012-1217 | Medium | 2012-02-21 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php. |
| CVE-2012-0865 | Medium | 2012-02-21 | Not applicable | Working exploit published | Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php. |
| CVE-2012-0242 | High | 2012-02-21 | Not applicable | Working exploit published | Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string. |
| CVE-2012-0241 | Medium | 2012-02-21 | Not applicable | Working exploit published | Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function. |
| CVE-2012-0200 | Medium | 2012-02-21 | Not applicable | Working exploit published | The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition. |
| CVE-2012-1200 | High | 2012-02-18 | Not applicable | Working exploit published | Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via a URL in the (1) fileType parameter to optimizer/index.php, (2) id parameter to administrator/modules/moduleslist.php, (3) filename parameter to includes/function/gets.php, or (4) conf[blockfile] parameter to includes/function/usertpl.php. |
| CVE-2012-1199 | High | 2012-02-18 | Not applicable | Working exploit published | Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to base_ag_main.php, (2) base_db_setup.php, (3) base_graph_common.php, (4) base_graph_display.php, (5) base_graph_form.php, (6) base_graph_main.php, (7) base_local_rules.php, (8) base_logout.php, (9) base_main.php, (10) base_maintenance.php, (11) base_payload.php, (12) base_qry_alert.php, (13) base_qry_common.php, (14) base_qry_main.php, (15) base_stat_alerts.php, (16) base_stat_class.php, (17) base_stat_common.php, (18) base_stat_ipaddr.php, (19) base_stat_iplink.php, (20) base_stat_ports.php, (21) base_stat_sensor.php, (22) base_stat_time.php, (23) base_stat_uaddr.php, (24) base_user.php, (25) index.php, (26) admin/base_roleadmin.php, (27) admin/base_useradmin.php, (28) admin/index.php, (29) help/base_setup_help.php, (30) includes/base_action.inc.php, (31) includes/base_cache.inc.php, (32) includes/base_db.inc.php, (33) includes/base_db.inc.php, (34) includes/base_include.inc.php, (35) includes/base_output_html.inc.php, (36) includes/base_output_query.inc.php, (37) includes/base_state_criteria.inc.php, (38) includes/base_state_query.inc.php or (39) setup/base_conf_contents.php; (40) GLOBALS[user_session_path] parameter to includes/base_state_common.inc.php; (41) BASE_Language parameter to setup/base_conf_contents.php; or (42) ado_inc_php parameter to setup/setup2.php. |
| CVE-2012-1198 | High | 2012-02-18 | Not applicable | Working exploit published | base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action. |
| CVE-2012-1196 | Medium | 2012-02-18 | Not applicable | Working exploit published | Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request. |
| CVE-2012-1195 | High | 2012-02-18 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore command in a RunAMTCommand SOAP request, then accessing the file via a direct request to the file in the web root. |
| CVE-2011-4614 | Medium | 2012-02-18 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2, and development versions of 4.7 allows remote attackers to execute arbitrary PHP code via a URL in the BACK_PATH parameter. |
| CVE-2012-0500 | High | 2012-02-15 | Outside Waratek scope | Working exploit published | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. |
| CVE-2012-1069 | Medium | 2012-02-14 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. |
| CVE-2012-1065 | Medium | 2012-02-14 | Not applicable | Working exploit published | Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the ExportSettings method. |
| CVE-2012-1059 | Medium | 2012-02-14 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, as demonstrated using the "Front" field in the shirt module. |
| CVE-2012-1058 | Medium | 2012-02-14 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php. |
| CVE-2012-1009 | Medium | 2012-02-14 | Not applicable | Working exploit published | NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request. |
| CVE-2012-0789 | Medium | 2012-02-14 | Not applicable | Working exploit published | Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache. |
| CVE-2012-0788 | Medium | 2012-02-14 | Not applicable | Working exploit published | The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server. |
| CVE-2010-5083 | High | 2012-02-14 | Not applicable | Working exploit published | SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php. |
| CVE-2012-1049 | Medium | 2012-02-13 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do. |
| CVE-2012-1048 | Medium | 2012-02-12 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. |
| CVE-2012-1047 | High | 2012-02-12 | Not applicable | Working exploit published | Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action. |
| CVE-2011-4341 | Medium | 2012-02-12 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to (1) symphony/publish/comments or (2) symphony/publish/images. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks via error messages. NOTE: some of these details are obtained from third party information. |
| CVE-2011-4340 | Low | 2012-02-12 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as demonstrated via requests to (a) the default URI, (b) about/, or (c) drafts/; or (2) the filter parameter in symphony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish/images. NOTE: some of these details are obtained from third party information. |
| CVE-2012-0834 | Medium | 2012-02-11 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engine action to cmd.php. |
| CVE-2012-0840 | Medium | 2012-02-10 | Not applicable | Working exploit published | tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. |
| CVE-2012-1029 | High | 2012-02-08 | Not applicable | Working exploit published | SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information. |
| CVE-2012-1028 | Medium | 2012-02-08 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter. |
| CVE-2012-1027 | Medium | 2012-02-08 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed. |
| CVE-2012-1026 | High | 2012-02-08 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. |
| CVE-2012-1025 | Medium | 2012-02-08 | Not applicable | Working exploit published | Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter. |
| CVE-2012-1024 | Medium | 2012-02-08 | Not applicable | Working exploit published | Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. |
| CVE-2012-1023 | Medium | 2012-02-08 | Not applicable | Working exploit published | Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter. |
| CVE-2012-1022 | High | 2012-02-08 | Not applicable | Working exploit published | SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action. |
| CVE-2012-1021 | Medium | 2012-02-08 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action. |
| CVE-2012-1018 | Medium | 2012-02-08 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconverter) module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter. |
| CVE-2012-1017 | High | 2012-02-08 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1) ip_addr[0][1], (2) ip_addr[0][2], or (3) ip_addr[0][9] parameters. |
| CVE-2012-1008 | Medium | 2012-02-08 | Not applicable | Working exploit published | OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message. |
| CVE-2012-1002 | High | 2012-02-08 | Not applicable | Working exploit published | SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter. |
| CVE-2012-1011 | High | 2012-02-07 | Not applicable | Working exploit published | actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory. |
| CVE-2012-1010 | High | 2012-02-07 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory. |
| CVE-2012-1007 | Medium | 2012-02-07 | Mitigation candidate | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do. |
| CVE-2012-1006 | Medium | 2012-02-07 | Mitigation candidate | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders. |
| CVE-2012-1005 | Medium | 2012-02-07 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using (1) Blog/MyFirstBlog.txt or (2) Blog/AboutSomething.txt. |
| CVE-2012-0992 | High | 2012-02-07 | Not applicable | Working exploit published | interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter. |
| CVE-2012-0991 | Low | 2012-02-07 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter. |
| CVE-2012-0990 | Low | 2012-02-07 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings[] parameters. |
| CVE-2012-0830 | High | 2012-02-06 | Not applicable | Working exploit published | The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885. |
| CVE-2011-4041 | High | 2012-02-06 | Not applicable | Working exploit published | webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592. |
| CVE-2011-4879 | High | 2012-02-03 | Not applicable | Working exploit published | miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character, which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request. |
| CVE-2011-4878 | High | 2012-02-03 | Not applicable | Working exploit published | Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI. |
| CVE-2011-4877 | High | 2012-02-03 | Not applicable | Working exploit published | HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP. |
| CVE-2011-4876 | High | 2012-02-03 | Not applicable | Working exploit published | Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string. |
| CVE-2011-4875 | High | 2012-02-03 | Not applicable | Working exploit published | Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings. |
| CVE-2012-0983 | High | 2012-02-02 | Not applicable | Working exploit published | SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. |
| CVE-2012-0982 | High | 2012-02-02 | Not applicable | Working exploit published | SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter. |
| CVE-2012-0981 | Medium | 2012-02-02 | Not applicable | Working exploit published | Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (dot dot) in the r parameter to index.php. NOTE: Some of these details are obtained from third party information. |
| CVE-2012-0980 | High | 2012-02-02 | Not applicable | Working exploit published | SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter. |
| CVE-2012-0809 | High | 2012-02-01 | Not applicable | Working exploit published | Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo. |
| CVE-2011-3659 | High | 2012-02-01 | Not applicable | Working exploit published | Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes. |
| CVE-2012-0937 | Medium | 2012-01-30 | Not applicable | Working exploit published | wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time |
| CVE-2012-0782 | Medium | 2012-01-30 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance |
| CVE-2011-4899 | High | 2012-01-30 | Not applicable | Working exploit published | wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments |
| CVE-2011-4898 | Medium | 2012-01-30 | Not applicable | Working exploit published | wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective |
| CVE-2012-0935 | High | 2012-01-29 | Not applicable | Working exploit published | SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter. |
| CVE-2012-0933 | Low | 2012-01-29 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/. |
| CVE-2012-0932 | Medium | 2012-01-29 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter. |
| CVE-2011-5075 | Medium | 2012-01-29 | Not applicable | Working exploit published | translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path. |
| CVE-2011-5074 | Medium | 2012-01-29 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via (1) user_profile_edit.php or (2) user_add.php. |
| CVE-2011-5073 | Medium | 2012-01-29 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to contact_support.php; (2) contractid parameter to contract_add_service.php; (3) user parameter to edit_backup_users.php; (4) id parameter to edit_escalation_path.php; the Referer to (5) forgotpwd.php, (6) an approvalpage action to billable_incidents.php, or (7) transactions.php; (8) action parameter to inbox.php; (9) search_string parameter in a findcontact action to incident_add.php; table1 parameter to (10) report_customers.php, (11) report_incidents_by_engineer.php, (12) report_incidents_by_site.php, or (13) report_marketing.php; or the (14) startdate or (15) enddate parameter to report_incidents_by_vendor.php. |
| CVE-2011-5072 | High | 2012-01-29 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to execute arbitrary SQL commands via the (1) start parameter to portal/kb.php; (2) contractid parameter to contract_add_service.php; (3) id parameter to edit_escalation_path.php; (4) unlock, (5) lock, or (6) selected parameter to holding_queue.php; inc parameter in a report action to (7) report_customers.php or (8) report_incidents_by_site.php; (9) start parameter to search.php; or (10) sites parameter to transactions.php. |
| CVE-2011-5071 | High | 2012-01-29 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information. |
| CVE-2011-4337 | High | 2012-01-29 | Not applicable | Working exploit published | Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable. |
| CVE-2011-3833 | Medium | 2012-01-29 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory. |
| CVE-2011-3829 | Medium | 2012-01-29 | Not applicable | Working exploit published | ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message. |
| CVE-2012-0053 | Medium | 2012-01-28 | Outside Waratek scope | Working exploit published | protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script. |
| CVE-2011-3479 | Medium | 2012-01-25 | Not applicable | Working exploit published | Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file. |
| CVE-2011-3478 | High | 2012-01-25 | Not applicable | Working exploit published | The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631. |
| CVE-2012-0913 | High | 2012-01-24 | Not applicable | Working exploit published | SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information. |
| CVE-2012-0389 | Medium | 2012-01-24 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter. |
| CVE-2012-0286 | Medium | 2012-01-24 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts. |
| CVE-2012-0285 | Medium | 2012-01-24 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2012-0906 | High | 2012-01-20 | Not applicable | Working exploit published | SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php. |
| CVE-2012-0905 | High | 2012-01-20 | Not applicable | Working exploit published | SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php. |
| CVE-2012-0904 | Medium | 2012-01-20 | Not applicable | Working exploit published | VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file. |