Archive
May 2011
Vulnerabilities first published in this month (UTC), newest first.
295 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execut…
-
Unscored —
Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in t…
-
Unscored —
login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header fo…
-
Unscored —
Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack v…
-
Unscored —
The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request …
-
Unscored —
Multiple unspecified vulnerabilities in Adobe Photoshop before 12.0.4 have unknown impact and attack vectors.
-
Unscored —
The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests …
-
Unscored —
The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might al…
-
Unscored —
The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUse…
-
Unscored —
The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an …
-
Unscored —
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandr…
-
Unscored —
The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterS…
-
Unscored —
Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remot…
-
Unscored —
Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file t…
-
Unscored —
Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote…
-
Unscored —
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memor…
-
Unscored —
Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attack…
-
Unscored —
usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local …
-
Unscored —
The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead…
-
Unscored —
The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unsp…
-
Unscored —
IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obt…
-
Unscored —
The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote a…
-
Unscored —
SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to exec…
-
Unscored —
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) lib…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote atta…
-
Unscored —
Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause…
-
Unscored —
Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corrup…
-
Unscored —
Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers…
-
Unscored —
Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine…
-
Unscored —
Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 a…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…
-
Unscored —
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…