Overview 16,786 matches · 108 in Waratek scope · 16 protected · 0 exploited · 0 CISA KEV · 689 EPSS ≥ 0.5
16,786matches
108in Waratek scope0.6%
16protected0.1%
0exploited0.0%
0CISA KEV0.0%
689EPSS ≥ 0.54.1%
Protected by Waratek
16
0.1%
Rule in development
0
0.0%
Mitigation candidate
92
0.5%
No exploit published
0
0.0%
Outside Waratek scope
66
0.4%
Not applicable
16,578
98.8%
Withdrawn CVE
34
0.2%
blocked by ARMR today
16
0.1%
partly blocked
0
0.0%
not blocked
16,770
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
16,786
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 2,591 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001480
Mitigation candidate2
Outside Waratek scope4
Not applicable474
Critical4
High219
Medium219
Low38
not blocked480
Working exploit published480
2002545
Mitigation candidate8
Outside Waratek scope4
Not applicable531
Withdrawn CVE2
Critical3
High276
Medium246
Low18
Unknown2
not blocked545
Working exploit published545
2003499
Protected by Waratek1
Mitigation candidate7
Outside Waratek scope2
Not applicable488
Withdrawn CVE1
Critical3
High236
Medium243
Low16
Unknown1
blocked by ARMR today1
not blocked498
Working exploit published499
2004755
Mitigation candidate1
Outside Waratek scope1
Not applicable753
Critical3
High302
Medium414
Low36
not blocked755
Working exploit published755
20051,341
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope4
Not applicable1,327
Withdrawn CVE5
Critical4
High658
Medium622
Low52
Unknown5
blocked by ARMR today1
not blocked1,340
Working exploit published1,341
20062,440
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope7
Not applicable2,425
Withdrawn CVE3
Critical4
High1,197
Medium1,137
Low99
Unknown3
blocked by ARMR today1
not blocked2,439
Working exploit published2,440
20072,495
Protected by Waratek1
Mitigation candidate10
Outside Waratek scope11
Not applicable2,470
Withdrawn CVE3
Critical6
High1,405
Medium1,052
Low29
Unknown3
blocked by ARMR today1
not blocked2,494
Working exploit published2,495
20082,518
Protected by Waratek3
Mitigation candidate9
Outside Waratek scope6
Not applicable2,495
Withdrawn CVE5
Critical4
High1,492
Medium987
Low30
Unknown5
blocked by ARMR today3
not blocked2,515
Working exploit published2,518
20092,591
Protected by Waratek4
Mitigation candidate12
Outside Waratek scope9
Not applicable2,560
Withdrawn CVE6
Critical5
High1,424
Medium1,123
Low33
Unknown6
blocked by ARMR today4
not blocked2,587
Working exploit published2,591
20101,313
Protected by Waratek3
Mitigation candidate11
Outside Waratek scope7
Not applicable1,290
Withdrawn CVE2
Critical6
High730
Medium547
Low28
Unknown2
blocked by ARMR today3
not blocked1,310
Working exploit published1,313
2011691
Protected by Waratek2
Mitigation candidate9
Outside Waratek scope5
Not applicable672
Withdrawn CVE3
Critical1
High380
Medium294
Low13
Unknown3
blocked by ARMR today2
not blocked689
Working exploit published691
2012253
Mitigation candidate9
Outside Waratek scope4
Not applicable238
Withdrawn CVE2
Critical1
High101
Medium143
Low6
Unknown2
not blocked253
Working exploit published253
1988199019921994199619982000200220042006200820102012
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2010-5099 | Medium | 2012-05-30 | Not applicable | Working exploit published | The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as demonstrated using path traversal sequences with %00 null bytes and CVE-2010-3714 to read the TYPO3 encryption key from localconf.php. |
| CVE-2012-2952 | High | 2012-05-29 | Not applicable | Working exploit published | SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the add_ons parameter. |
| CVE-2012-2941 | Medium | 2012-05-27 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter. |
| CVE-2012-2940 | Medium | 2012-05-27 | Not applicable | Working exploit published | MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file. |
| CVE-2012-2939 | Medium | 2012-05-27 | Not applicable | Working exploit published | Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hotel-image-add.php, or (3) hotel-add.php. |
| CVE-2012-2938 | Medium | 2012-05-27 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to (1) holiday_add.php or (2) holiday_view.php. |
| CVE-2012-2436 | Medium | 2012-05-27 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module. |
| CVE-2012-2176 | High | 2012-05-25 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method. |
| CVE-2011-2918 | Medium | 2012-05-24 | Not applicable | Working exploit published | The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application. |
| CVE-2012-0289 | High | 2012-05-23 | Not applicable | Working exploit published | Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script. |
| CVE-2012-2926 | Critical | 2012-05-22 | Not applicable | Working exploit published | Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3 before 2.3.7, and 2.4 before 2.4.1 do not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors. |
| CVE-2012-1990 | Medium | 2012-05-22 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the evtvariablename parameter in an evts.xml action to kw.dll, (2) unspecified search fields, or (3) unspecified content-display fields. |
| CVE-2012-2925 | High | 2012-05-21 | Not applicable | Working exploit published | SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action. |
| CVE-2012-2924 | High | 2012-05-21 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. |
| CVE-2012-2923 | High | 2012-05-21 | Not applicable | Working exploit published | SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter. |
| CVE-2012-2919 | Medium | 2012-05-21 | Not applicable | Working exploit published | Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter. |
| CVE-2012-2918 | Medium | 2012-05-21 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter. |
| CVE-2012-2917 | Medium | 2012-05-21 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key (cnd-key) in a share-and-follow-menu page to wp-admin/admin.php. |
| CVE-2012-2915 | High | 2012-05-21 | Not applicable | Working exploit published | Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file. |
| CVE-2012-2914 | Medium | 2012-05-21 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. |
| CVE-2012-2913 | Medium | 2012-05-21 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_marker.php, as reachable through wp-admin/admin.php. |
| CVE-2012-2911 | Medium | 2012-05-21 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows remote attackers to inject arbitrary web script or HTML via the onlyDB parameter. |
| CVE-2012-2910 | Medium | 2012-05-21 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter to demo/phpThumb.demo.random.php or (2) title parameter to demo/phpThumb.demo.showpic.php. |
| CVE-2012-2909 | Medium | 2012-05-21 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) text field in the Private Messages System, (2) Bad Word field in Zensur, or (3) Portal or (4) Topic field in Kommentar. |
| CVE-2012-2908 | High | 2012-05-21 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameter. |
| CVE-2012-2906 | Medium | 2012-05-21 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r422) allow remote attackers to inject arbitrary web script or HTML via the (1) add_img_name_post, (2) asciiart_post, (3) expediteur, (4) titre_sav, or (5) z39d27af885b32758ac0e7d4014a61561 parameter. |
| CVE-2012-2905 | Medium | 2012-05-21 | Not applicable | Working exploit published | Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request. |
| CVE-2012-2904 | Medium | 2012-05-21 | Not applicable | Working exploit published | player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter. |
| CVE-2012-2903 | Medium | 2012-05-21 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php. |
| CVE-2012-2344 | Unknown | 2012-05-21 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-5099. Reason: This candidate is a duplicate of CVE-2010-5099. Notes: All CVE users should reference CVE-2010-5099 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2012-2338 | High | 2012-05-21 | Not applicable | Working exploit published | SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php. |
| CVE-2012-2271 | High | 2012-05-21 | Not applicable | Working exploit published | Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a long string in the first argument (aka the reg_name argument). |
| CVE-2012-0299 | High | 2012-05-21 | Not applicable | Working exploit published | The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors. |
| CVE-2012-0298 | Medium | 2012-05-21 | Not applicable | Working exploit published | The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors. |
| CVE-2012-0207 | High | 2012-05-17 | Not applicable | Working exploit published | The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets. |
| CVE-2012-0663 | High | 2012-05-16 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file. |
| CVE-2012-2612 | Medium | 2012-05-15 | Not applicable | Working exploit published | The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. |
| CVE-2012-2611 | High | 2012-05-15 | Not applicable | Working exploit published | The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet. |
| CVE-2012-2514 | Medium | 2012-05-15 | Not applicable | Working exploit published | The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. |
| CVE-2012-2513 | Medium | 2012-05-15 | Not applicable | Working exploit published | The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. |
| CVE-2012-2512 | Medium | 2012-05-15 | Not applicable | Working exploit published | The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. |
| CVE-2012-2511 | Medium | 2012-05-15 | Not applicable | Working exploit published | The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. |
| CVE-2012-2277 | High | 2012-05-14 | Not applicable | Working exploit published | The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (pvcontrol.exe process hang) via \n (line feed) characters in the Id fields of many "batch begin untethered" commands. |
| CVE-2012-2276 | High | 2012-05-14 | Not applicable | Working exploit published | The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via input data that (1) lacks FIPS fields or (2) has an invalid version number. |
| CVE-2012-2329 | Medium | 2012-05-11 | Not applicable | Working exploit published | Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request. |
| CVE-2012-2027 | High | 2012-05-09 | Not applicable | Working exploit published | Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file. |
| CVE-2012-0780 | High | 2012-05-09 | Not applicable | Working exploit published | Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026. |
| CVE-2012-0181 | High | 2012-05-09 | Not applicable | Working exploit published | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability." |
| CVE-2012-0202 | High | 2012-05-04 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data. |
| CVE-2012-1936 | Medium | 2012-05-03 | Not applicable | Working exploit published | The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network, as demonstrated by attacks against the wp-admin/admin-ajax.php and wp-admin/user-new.php scripts. NOTE: the vendor reportedly disputes the significance of this issue because wp_create_nonce operates as intended, even if it is arguably inconsistent with certain CSRF protection details advocated by external organizations |
| CVE-2012-0551 | Medium | 2012-05-03 | Mitigation candidate | Working exploit published | Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment. |
| CVE-2012-0550 | Medium | 2012-05-03 | Mitigation candidate | Working exploit published | Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container. |
| CVE-2012-0549 | High | 2012-05-03 | Mitigation candidate | Working exploit published | Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and availability, related to Desktop API. |
| CVE-2012-2441 | High | 2012-04-28 | Not applicable | Working exploit published | RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803. |
| CVE-2012-1803 | High | 2012-04-28 | Not applicable | Working exploit published | RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session. |
| CVE-2012-2131 | High | 2012-04-24 | Not applicable | Working exploit published | Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110. |
| CVE-2012-2234 | Medium | 2012-04-22 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an add_new_user action. |
| CVE-2012-0946 | Medium | 2012-04-22 | Not applicable | Working exploit published | The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges. |
| CVE-2012-0708 | High | 2012-04-22 | Not applicable | Working exploit published | Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch. |
| CVE-2012-2270 | Medium | 2012-04-20 | Not applicable | Working exploit published | Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter. |
| CVE-2012-2236 | Medium | 2012-04-20 | Not applicable | Working exploit published | SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action. |
| CVE-2012-0407 | Medium | 2012-04-20 | Not applicable | Working exploit published | Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field. |
| CVE-2012-0406 | High | 2012-04-20 | Not applicable | Working exploit published | The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password. |
| CVE-2012-2396 | Medium | 2012-04-19 | Not applicable | Working exploit published | VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file. |
| CVE-2012-2110 | High | 2012-04-19 | Not applicable | Working exploit published | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. |
| CVE-2012-0278 | High | 2012-04-18 | Not applicable | Working exploit published | Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression. |
| CVE-2011-4871 | Medium | 2012-04-18 | Not applicable | Working exploit published | Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723. |
| CVE-2012-1979 | Low | 2012-04-17 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action. |
| CVE-2011-4883 | Medium | 2012-04-13 | Not applicable | Working exploit published | The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service (resource consumption) via a crafted request. |
| CVE-2011-4882 | Medium | 2012-04-13 | Not applicable | Working exploit published | The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) via an unspecified command in an HTTP request. |
| CVE-2011-4881 | Medium | 2012-04-13 | Not applicable | Working exploit published | The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted HTTP request. |
| CVE-2011-4880 | Medium | 2012-04-13 | Not applicable | Working exploit published | Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request. |
| CVE-2012-2210 | High | 2012-04-11 | Not applicable | Working exploit published | The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN packets, as demonstrated by hping, a related issue to CVE-1999-0116. |
| CVE-2012-2156 | Medium | 2012-04-11 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section. |
| CVE-2012-1673 | High | 2012-04-11 | Not applicable | Working exploit published | SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter. |
| CVE-2012-1672 | High | 2012-04-11 | Not applicable | Working exploit published | SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter. |
| CVE-2012-1593 | Low | 2012-04-11 | Not applicable | Working exploit published | epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet. |
| CVE-2012-0067 | Medium | 2012-04-11 | Not applicable | Working exploit published | wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file. |
| CVE-2012-1182 | High | 2012-04-10 | Not applicable | Working exploit published | The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call. |
| CVE-2012-0163 | High | 2012-04-10 | Not applicable | Working exploit published | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability." |
| CVE-2012-2215 | Medium | 2012-04-09 | Not applicable | Working exploit published | Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request. |
| CVE-2011-3176 | High | 2012-04-09 | Not applicable | Working exploit published | Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request. |
| CVE-2011-3175 | High | 2012-04-09 | Not applicable | Working exploit published | Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request. |
| CVE-2012-1239 | High | 2012-04-06 | Not applicable | Working exploit published | The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors. |
| CVE-2011-4535 | Medium | 2012-04-03 | Not applicable | Working exploit published | Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP file. |
| CVE-2011-4045 | Medium | 2012-04-03 | Not applicable | Working exploit published | Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document. |
| CVE-2011-4044 | Medium | 2012-04-03 | Not applicable | Working exploit published | An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods. |
| CVE-2011-4043 | High | 2012-04-03 | Not applicable | Working exploit published | Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow. |
| CVE-2011-4042 | High | 2012-04-03 | Not applicable | Working exploit published | An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer. |
| CVE-2012-0221 | Medium | 2012-04-02 | Not applicable | Working exploit published | The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet. |
| CVE-2012-1670 | Medium | 2012-03-31 | Not applicable | Working exploit published | admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action. |
| CVE-2012-1913 | Unknown | 2012-03-28 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0754. Reason: This candidate is a reservation duplicate of CVE-2010-0754. Notes: All CVE users should reference CVE-2010-0754 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2012-1904 | Medium | 2012-03-28 | Not applicable | Working exploit published | mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file. |
| CVE-2007-6752 | Medium | 2012-03-28 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit against platform complexity and performance impact" and concluding that a change to the logout behavior is not planned because "for most sites it is not worth the trade-off. |
| CVE-2012-1790 | Medium | 2012-03-19 | Not applicable | Working exploit published | Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php. |
| CVE-2012-1787 | Medium | 2012-03-19 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters. |
| CVE-2012-1784 | High | 2012-03-19 | Not applicable | Working exploit published | SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php. |
| CVE-2012-1783 | High | 2012-03-19 | Not applicable | Working exploit published | Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number. |
| CVE-2012-1782 | Medium | 2012-03-19 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar. |
| CVE-2012-1778 | High | 2012-03-19 | Not applicable | Working exploit published | SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. |