Skip to content
OpenAdvisories

Archive

13 September 2011

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —
    CVE-2010-4835 Public exploit

    Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated user…

  • Unscored —
    CVE-2010-4838 Public exploit

    SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated user…

  • Unscored —
    CVE-2010-4837 Public exploit

    Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attac…

  • Unscored —
    CVE-2010-4834 Public exploit

    Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition all…

  • Unscored —
    CVE-2010-4836 Public exploit

    Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2010-4839 Public exploit

    SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to …

  • Unscored —

    Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, …

  • Unscored —

    Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obt…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote at…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attack…

  • Unscored —

    Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2009-5098 Public exploit

    The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote a…