Vulnerability_Archives

CVE_ARCHIVES.DB

ARCHIVE_CHRONOLOGY.INDEXSTATUS: ONLINE

Risk_Filter:

Records: 5,351

Mode: SECURE_QUERY

CVE-2012-6371

LOW

The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier

Discovered

Dec 31, 2012

CVE-2011-5251

MEDIUM

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and con

Discovered

Dec 31, 2012

CVE-2012-6453

MEDIUM

Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script

Discovered

Dec 31, 2012

CVE-2012-6339

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attacke

Discovered

Dec 31, 2012

CVE-2012-6337

LOW

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might al

Discovered

Dec 31, 2012

CVE-2012-6336

LOW

The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS lo

Discovered

Dec 31, 2012

CVE-2012-6335

LOW

The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available

Discovered

Dec 31, 2012

CVE-2012-6334

LOW

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows

Discovered

Dec 31, 2012

CVE-2012-5642

HIGH

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsaf

Discovered

Dec 31, 2012

CVE-2012-4688

HIGH

The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser

Discovered

Dec 31, 2012

CVE-2012-4792

HIGH

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that

Discovered

Dec 30, 2012

CVE-2012-6369

MEDIUM

Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to

Discovered

Dec 28, 2012

CVE-2012-5445

MEDIUM

The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly

Discovered

Dec 28, 2012

CVE-2012-4932

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web scri

Discovered

Dec 28, 2012

CVE-2012-4528

MEDIUM

The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP app

Discovered

Dec 28, 2012

CVE-2012-3873

MEDIUM

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parame

Discovered

Dec 28, 2012

CVE-2012-3872

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrary web script or HTML via (1) t

Discovered

Dec 28, 2012

CVE-2012-3871

LOW

Cross-site scripting (XSS) vulnerability in data/hybrid/i_hybrid.php in Open Constructor 3.12.0 allows remote authenticated users to inject arbitrary

Discovered

Dec 28, 2012

CVE-2012-3870

LOW

Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject

Discovered

Dec 28, 2012

CVE-2012-0741

MEDIUM

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual E

Discovered

Dec 28, 2012

...