# CVEs published 2012-03-19

33 CVEs were published on March 19, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0328](https://cve.now/CVE-2012-0328.md): Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors. (no CVSS)
- [CVE-2012-1181](https://cve.now/CVE-2012-1181.md): fcgid\_spawn\_ctl.c in the mod\_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for… (no CVSS)
- [CVE-2012-1236](https://cve.now/CVE-2012-1236.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the… (no CVSS)
- [CVE-2012-0054](https://cve.now/CVE-2012-0054.md): libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products… (no CVSS, golismero)
- [CVE-2012-0808](https://cve.now/CVE-2012-0808.md): as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local… (no CVSS)
- [CVE-2012-0872](https://cve.now/CVE-2012-0872.md): Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2012-1039](https://cve.now/CVE-2012-1039.md): Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2012-1464](https://cve.now/CVE-2012-1464.md): Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a request with a… (no CVSS)
- [CVE-2012-1465](https://cve.now/CVE-2012-1465.md): Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1466](https://cve.now/CVE-2012-1466.md): The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision… (no CVSS)
- [CVE-2012-1498](https://cve.now/CVE-2012-1498.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the… (no CVSS)
- [CVE-2009-5112](https://cve.now/CVE-2009-5112.md): wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request. (no CVSS)
- [CVE-2009-5113](https://cve.now/CVE-2009-5113.md): Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-5114](https://cve.now/CVE-2009-5114.md): Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-5086](https://cve.now/CVE-2010-5086.md): Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2011-5082](https://cve.now/CVE-2011-5082.md): Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject… (no CVSS)
- [CVE-2011-5083](https://cve.now/CVE-2011-5083.md): Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2012-1297](https://cve.now/CVE-2012-1297.md): Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote… (no CVSS)
- [CVE-2012-1778](https://cve.now/CVE-2012-1778.md): SQL injection vulnerability in artykul\_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2012-1779](https://cve.now/CVE-2012-1779.md): Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2012-1780](https://cve.now/CVE-2012-1780.md): SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category… (no CVSS)
- [CVE-2012-1781](https://cve.now/CVE-2012-1781.md): Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2012-1782](https://cve.now/CVE-2012-1782.md): Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2012-1783](https://cve.now/CVE-2012-1783.md): Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an… (no CVSS)
- [CVE-2012-1784](https://cve.now/CVE-2012-1784.md): SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a… (no CVSS)
- [CVE-2012-1785](https://cve.now/CVE-2012-1785.md): kg\_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2012-1786](https://cve.now/CVE-2012-1786.md): The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the… (no CVSS)
- [CVE-2012-1787](https://cve.now/CVE-2012-1787.md): Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject… (no CVSS)
- [CVE-2012-1788](https://cve.now/CVE-2012-1788.md): Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2012-1789](https://cve.now/CVE-2012-1789.md): Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2012-1790](https://cve.now/CVE-2012-1790.md): Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the… (no CVSS)
- [CVE-2012-1775](https://cve.now/CVE-2012-1775.md): Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted… (no CVSS)
- [CVE-2012-1776](https://cve.now/CVE-2012-1776.md): Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-03-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.