|
289771
|
7.8 |
HIGH
Local
|
citrix
|
receiver xenapp_online
|
Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a spec…
|
CWE-20
Improper Input Validation
|
CVE-2012-4603
|
2024-11-21 10:43 |
2020-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289772
|
7.8 |
HIGH
Local
|
toshiba
|
configfree_utility
|
Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code.
|
CWE-787
Out-of-bounds Write
|
CVE-2012-4980
|
2024-11-21 10:43 |
2019-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289773
|
7.8 |
HIGH
Local
|
freebsd debian
|
freebsd debian_linux
|
FreeBSD: Input Validation Flaw allows local users to gain elevated privileges
|
CWE-20
Improper Input Validation
|
CVE-2012-4576
|
2024-11-21 10:43 |
2019-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289774
|
6.1 |
MEDIUM
Network
|
piwigo
|
piwigo
|
piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)
|
CWE-79
Cross-site Scripting
|
CVE-2012-4526
|
2024-11-21 10:43 |
2019-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289775
|
6.1 |
MEDIUM
Network
|
piwigo
|
piwigo
|
piwigo has XSS in password.php
|
CWE-79
Cross-site Scripting
|
CVE-2012-4525
|
2024-11-21 10:43 |
2019-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289776
|
7.5 |
HIGH
Network
|
sillycycle fedoraproject
|
xlockmore fedora
|
xlockmore before 5.43 'dclock' security bypass vulnerability
|
CWE-20
Improper Input Validation
|
CVE-2012-4524
|
2024-11-21 10:43 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289777
|
9.8 |
CRITICAL
Network
|
letodms_project
|
letodms
|
SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2012-4570
|
2024-11-21 10:43 |
2017-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289778
|
6.1 |
MEDIUM
Network
|
letodms_project
|
letodms
|
Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vector…
|
CWE-79
Cross-site Scripting
|
CVE-2012-4569
|
2024-11-21 10:43 |
2017-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289779
|
8.8 |
HIGH
Network
|
letodms_project
|
letodms
|
Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
|
CWE-352
Origin Validation Error
|
CVE-2012-4568
|
2024-11-21 10:43 |
2017-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289780
|
6.1 |
MEDIUM
Network
|
letodms_project
|
letodms
|
Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) inc/inc.Cl…
|
CWE-79
Cross-site Scripting
|
CVE-2012-4567
|
2024-11-21 10:43 |
2017-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|