20 September 2011

9 results · Feed

• Unscored —
  CVE-2011-1510

  Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows…

  Sep 20, 2011
• Unscored —
  CVE-2011-1509

  The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher f…

  Sep 20, 2011
• Unscored —
  CVE-2011-1911

  JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, …

  Sep 20, 2011
• Unscored —
  CVE-2011-3577

  IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authenti…

  Sep 20, 2011
• Unscored —
  CVE-2011-3482

  The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2…

  wireshark Debian
  Sep 20, 2011
• Unscored —
  CVE-2011-3484

  The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.…

  wireshark Debian
  Sep 20, 2011
• Unscored —
  CVE-2011-3360 Public exploit EPSS 35%

  Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain p…

  wireshark Debian
  Sep 20, 2011
• Unscored —
  CVE-2011-3483 Public exploit

  Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed c…

  wireshark Debian
  Sep 20, 2011
• Unscored —
  CVE-2011-2672

  Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web…

  Sep 20, 2011