Skip to content
OpenAdvisories

Archive

3 February 2011

Vulnerabilities first published on this day (UTC), newest first.

← January 2011 2011 / February /3 March 2011 →
  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.1
    CVE-2011-0720

    Plone Privilege Escalation Vulnerability

    Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.

    plone PyPI
  • Unscored —
    CVE-2010-4725

    Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unsp…

    smarty3 Debian
  • Unscored —
    CVE-2010-4723

    Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object member…

    smarty3 Debian
  • Unscored —
    CVE-2010-4724

    Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and re…

    smarty3 Debian
  • Unscored —
    CVE-2010-4722

    Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and remote attack vectors.

    smarty3 Debian
  • Unscored —
    CVE-2010-4726

    Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. N…

    smarty3 Debian
  • Unscored —
    CVE-2010-4727

    Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote atta…

    smarty3 Debian
  • Medium —
    CVE-2009-5054

    Smarty Does Not Consider Umask Values When Setting Permissions

    Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.

    smarty3 smarty/smarty Debian Packagist
  • Unscored —
    CVE-2009-5053

    Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by inject…

    smarty3 Debian
  • Unscored —
    CVE-2009-5052

    Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors.

    smarty3 Debian
  • Medium —
    CVE-2011-0451

    EC-CUBE XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspec…

    ec-cube/ec-cube Packagist
  • Unscored —
    CVE-2011-0354 Public exploit EPSS 14%

    The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with softwa…