Archive
April 2011
Vulnerabilities first published in this month (UTC), newest first.
59 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allo…
-
Unscored —CVE-2010-4801 Public exploit
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execut…
-
Unscored —CVE-2010-4800 Public exploit
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2010-4791 Public exploit
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_use…
-
Unscored —CVE-2010-4794 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 an…
-
Unscored —CVE-2010-4795 Public exploit
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote att…
-
Unscored —CVE-2010-4799 Public exploit
Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacke…
-
Unscored —CVE-2010-4797 Public exploit
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute …
-
Unscored —CVE-2010-4792 Public exploit
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2010-4798 Public exploit
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2010-4793 Public exploit
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL …
-
Unscored —
Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0…
-
Unscored —CVE-2011-0836 Public exploit
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 2…
-
Unscored —
Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicat…
-
Unscored —CVE-2011-1723 Public exploit
Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote a…
-
Unscored —CVE-2011-1496 Public exploit
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a …
-
Unscored —CVE-2011-1715 Public exploit
Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other…
-
Medium —CVE-2011-1714 Public exploit
QooxDoo XSS in Callback Parameter
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or H…
-
Unscored —
Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before …
-
Unscored —
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka k…
-
Unscored —CVE-2011-1237 Public exploit
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…
-
Unscored —
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain len…
-
Unscored —
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow r…
-
Critical 9.8
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, W…
-
Unscored —
Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1…
-
High 8.8
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; …
KEV Mar 3, 2022 -
Unscored —CVE-2011-0748 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack t…
-
Unscored —CVE-2011-1682 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hij…
-
Unscored —
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.…
-
Medium 6.1CVE-2009-5065 Public exploit
feedparser Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
-
Unscored —
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote …
-
Unscored —CVE-2011-1668 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other ve…
-
Unscored —CVE-2011-1667 Public exploit
SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2011-1670 Public exploit
Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions…
-
Unscored —CVE-2011-1671 Public exploit
Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel a…
-
Unscored —CVE-2011-1665 Public exploit
PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —CVE-2011-0536 Public exploit
Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (ak…
-
Medium —CVE-2011-1475 Public exploit
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, …
-
Unscored —
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to e…
-
Unscored —CVE-2010-4783 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when m…