Archive
20 May 2011
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —CVE-2011-0962 Public exploit
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services De…
-
Unscored —CVE-2011-0960 Public exploit
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to …
-
Unscored —
FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote …
-
Unscored —
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Ser…
-
Unscored —
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap …
-
Unscored —CVE-2011-0961 Public exploit
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Servic…
-
Unscored —
The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does …
-
Unscored —CVE-2011-1838 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to…
-
Unscored —
The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepaliv…
-
Medium —
Access restriction bypass in Apache Tomcat
Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this v…
-
Unscored —
Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec s…
-
Unscored —
Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary command…
-
Unscored —
The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media pla…
-
Unscored —
The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow rem…
-
Unscored —
The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 al…
-
Unscored —
Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field withou…
-
Unscored —
Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execut…
-
Unscored —
Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in t…
-
Unscored —
login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header fo…
-
Unscored —
Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack v…
-
Unscored —
The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request …
-
Unscored —
Multiple unspecified vulnerabilities in Adobe Photoshop before 12.0.4 have unknown impact and attack vectors.
-
Unscored —
The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests …
-
Unscored —
The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might al…
-
Unscored —
The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUse…
-
Unscored —
The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an …
-
Unscored —
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandr…
-
Unscored —
The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterS…
-
Unscored —
Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remot…
-
Unscored —
Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file t…
-
Unscored —
Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote…
-
Unscored —
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memor…
-
Unscored —
Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE…