Archive
27 April 2011
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allow…
-
Unscored —
Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.…
-
Unscored —
The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly val…
-
Unscored —
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain se…
-
Unscored —
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line …
-
Unscored —
Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.…
-
Unscored —
manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x befo…
-
Unscored —CVE-2011-1719 EPSS 12%
Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allow…
-
Unscored —CVE-2010-4801 Public exploit
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execut…
-
Unscored —
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2010-4800 Public exploit
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2010-4791 Public exploit
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_use…
-
Unscored —
Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions, allows remote FTP servers t…
-
Unscored —CVE-2010-4794 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 an…
-
Unscored —CVE-2010-4795 Public exploit
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote att…
-
Unscored —CVE-2010-4799 Public exploit
Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacke…
-
Unscored —CVE-2010-4797 Public exploit
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute …
-
Unscored —CVE-2010-4792 Public exploit
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2010-4798 Public exploit
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2010-4793 Public exploit
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL …
-
Unscored —
oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms bef…
-
Unscored —
api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is ena…
-
Unscored —
PHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when register_globals is ena…