Skip to content
OpenAdvisories

Archive

23 September 2011

Vulnerabilities first published on this day (UTC), newest first.

← August 2011 2011 / September /23 October 2011 →
  1. 1 
  2. 219
  3. 3 
  4. 4 
  5. 5 
  6. 618
  7. 7 
  8. 88
  9. 99
  10. 103
  11. 111
  12. 12 
  13. 1312
  14. 145
  15. 1533
  16. 1618
  17. 1738
  18. 18 
  19. 192
  20. 209
  21. 218
  22. 229
  23. 2368
  24. 2467
  25. 25 
  26. 26 
  27. 2725
  28. 2816
  29. 2914
  30. 305
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2011-3712

    CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file

    CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.

    cakephp/cakephp Packagist
  • Medium 5.3
    CVE-2011-3744

    HTML Purifier allows remote attackers to obtain sensitive information

    HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files.

    ezyang/htmlpurifier php-htmlpurifier Ubuntu Packagist