CVEs

386,623 total · page 6702 of 7,733

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2012-4292	Wireshark Wireshark	0.00	—	0.02	Aug 16, 2012	The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote…
CVE-2012-4291	Wireshark Wireshark	0.00	—	0.01	Aug 16, 2012	The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVE-2012-4290	Wireshark Wireshark	0.00	—	0.01	Aug 16, 2012	The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
CVE-2012-4289	Wireshark Wireshark	0.00	—	0.01	Aug 16, 2012	epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.
CVE-2012-4288	Wireshark Wireshark	0.00	—	0.02	Aug 16, 2012	Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large…
CVE-2012-4287	Wireshark Wireshark	0.00	—	0.02	Aug 16, 2012	epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
CVE-2012-4286	Wireshark Wireshark	0.00	—	0.02	Aug 16, 2012	The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.
CVE-2012-4285	Wireshark Wireshark	0.00	—	0.02	Aug 16, 2012	The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a…
CVE-2012-3251	Microfocus Service Manager Web Tier	0.00	—	0.02	Aug 16, 2012	Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3250	Microfocus Service Center Server	0.00	—	0.02	Aug 16, 2012	Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.
CVE-2012-3249	Microfocus Fortify Software Security Center	0.00	—	0.01	Aug 16, 2012	HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2012-3248	Microfocus Fortify Software Security Center	0.00	—	0.02	Aug 16, 2012	HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2012-3247	Microfocus Integrity Server BL860c i2	0.00	—	0.00	Aug 16, 2012	Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors.
CVE-2012-3025	Tridium Niagara Ax	0.00	—	0.02	Aug 16, 2012	The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2012-3024	Tridium Niagara Ax	0.00	—	0.02	Aug 16, 2012	Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
CVE-2012-3009	Siemens Foundation Comos	0.00	—	0.02	Aug 16, 2012	Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.
CVE-2012-2283	Iomega Home Media Network Hard Drive	0.00	—	0.01	Aug 16, 2012	The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before…
CVE-2012-4344	Ipswitch, Inc. Whatsup	0.03	—	0.04	Aug 15, 2012	Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.
CVE-2012-2601	Ipswitch, Inc. Whatsup	0.03	—	0.03	Aug 15, 2012	SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.
CVE-2012-4343	Menalto Gallery	0.00	—	0.01	Aug 15, 2012	Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.
CVE-2012-4342	Menalto Gallery	0.00	—	0.01	Aug 15, 2012	Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4341	SAP Netweaver Abap	0.01	—	0.08	Aug 15, 2012	Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package…
CVE-2012-4340	Sybase Easerver	0.00	—	0.01	Aug 15, 2012	Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3434	WordPress Count Per Day	0.00	—	0.02	Aug 15, 2012	Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter.
CVE-2012-2770	Bestpractical Authen::ExternalAuth	0.00	—	0.01	Aug 15, 2012	The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."
CVE-2012-2769	Bestpractical Rt	0.00	—	0.01	Aug 15, 2012	Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or…
CVE-2012-2768	Bestpractical Rtfm	0.00	—	0.01	Aug 15, 2012	Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4037	Transmissionbt Transmission	0.00	—	0.01	Aug 15, 2012	Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.
CVE-2012-3435	Zabbix Zabbix	0.03	—	0.04	Aug 15, 2012	SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
CVE-2012-2570	X Cart Gold	0.03	—	0.02	Aug 15, 2012	Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter.
CVE-2012-4162	Adobe Inc. Acrobat	0.00	—	0.04	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4161.
CVE-2012-4161	Adobe Inc. Acrobat	0.00	—	0.04	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4162.
CVE-2012-4160	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4159	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4158	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4157	Adobe Inc. Acrobat	0.04	—	0.46	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4156	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4155	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4154	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4153	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4152	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4151	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4150	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4149	Adobe Inc. Acrobat	0.01	—	0.13	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4148	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4147	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4148,…
CVE-2012-2051	Adobe Inc. Acrobat	0.01	—	0.08	Aug 15, 2012	Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4147, CVE-2012-4148,…
CVE-2012-2050	Adobe Inc. Acrobat	0.01	—	0.13	Aug 15, 2012	Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CVE-2012-2049	Adobe Inc. Acrobat	0.01	—	0.13	Aug 15, 2012	Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CVE-2012-2047	Adobe Inc. Shockwave Player	0.00	—	0.04	Aug 15, 2012	Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046.

CVE-2012-4292Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.02
The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote…
CVE-2012-4291Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.01
The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVE-2012-4290Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.01
The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
CVE-2012-4289Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.01
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.
CVE-2012-4288Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.02
Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large…
CVE-2012-4287Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.02
epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
CVE-2012-4286Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.02
The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.
CVE-2012-4285Aug 16, 2012
Wireshark
Wireshark
risk 0.00cvss —epss 0.02
The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a…
CVE-2012-3251Aug 16, 2012
Microfocus
Service Manager Web Tier
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3250Aug 16, 2012
Microfocus
Service Center Server
risk 0.00cvss —epss 0.02
Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.
CVE-2012-3249Aug 16, 2012
Microfocus
Fortify Software Security Center
risk 0.00cvss —epss 0.01
HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2012-3248Aug 16, 2012
Microfocus
Fortify Software Security Center
risk 0.00cvss —epss 0.02
HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2012-3247Aug 16, 2012
Microfocus
Integrity Server BL860c i2
risk 0.00cvss —epss 0.00
Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors.
CVE-2012-3025Aug 16, 2012
Tridium
Niagara Ax
risk 0.00cvss —epss 0.02
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2012-3024Aug 16, 2012
Tridium
Niagara Ax
risk 0.00cvss —epss 0.02
Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
CVE-2012-3009Aug 16, 2012
Siemens Foundation
Comos
risk 0.00cvss —epss 0.02
Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.
CVE-2012-2283Aug 16, 2012
Iomega
Home Media Network Hard Drive
risk 0.00cvss —epss 0.01
The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before…
CVE-2012-4344Aug 15, 2012
Ipswitch, Inc.
Whatsup
risk 0.03cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.
CVE-2012-2601Aug 15, 2012
Ipswitch, Inc.
Whatsup
risk 0.03cvss —epss 0.03
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.
CVE-2012-4343Aug 15, 2012
Menalto
Gallery
risk 0.00cvss —epss 0.01
Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.
CVE-2012-4342Aug 15, 2012
Menalto
Gallery
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4341Aug 15, 2012
SAP
Netweaver Abap
risk 0.01cvss —epss 0.08
Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package…
CVE-2012-4340Aug 15, 2012
Sybase
Easerver
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3434Aug 15, 2012
WordPress
Count Per Day
risk 0.00cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter.
CVE-2012-2770Aug 15, 2012
Bestpractical
Authen::ExternalAuth
risk 0.00cvss —epss 0.01
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."
CVE-2012-2769Aug 15, 2012
Bestpractical
Rt
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or…
CVE-2012-2768Aug 15, 2012
Bestpractical
Rtfm
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4037Aug 15, 2012
Transmissionbt
Transmission
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.
CVE-2012-3435Aug 15, 2012
Zabbix
Zabbix
risk 0.03cvss —epss 0.04
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
CVE-2012-2570Aug 15, 2012
X Cart
Gold
risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter.
CVE-2012-4162Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.04
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4161.
CVE-2012-4161Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.04
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4162.
CVE-2012-4160Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4159Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4158Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4157Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.04cvss —epss 0.46
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4156Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4155Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4154Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4153Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4152Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4151Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4150Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4149Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.13
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4148Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147,…
CVE-2012-4147Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4148,…
CVE-2012-2051Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4147, CVE-2012-4148,…
CVE-2012-2050Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.13
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CVE-2012-2049Aug 15, 2012
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.13
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CVE-2012-2047Aug 15, 2012
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046.