2012

Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitra

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL com

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL comm

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL command

Cross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web sc

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester S

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Sys

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference

Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.

Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for W

Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows

Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows

The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary cod

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code vi

WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a denial of service (m

UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-depende

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service (buffer overflo

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remot

The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows r

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to th

The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passc

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialin

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passc

The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature,

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to

Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's s

Mail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address, which allows remote at

Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows

Mail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which allows remote attackers to

The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized m

The kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet-filter data structures, whi

Buffer overflow in the IPsec component in Apple iOS before 6 allows remote attackers to execute arbitrary code via a cra

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a

The DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets containing a MAC addre

CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to o

Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physical

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialize

Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management priva

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use

Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to exe

Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (ak

CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of s

Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address