Skip to content
OpenAdvisories

Archive

27 September 2011

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —

    The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read applicatio…

  • Unscored —

    Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Troja…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inj…

  • Unscored —

    Untrusted search path vulnerability in PlotSoft PDFill PDF Editor 8.0 allows local users to gain privileges via a Troja…

  • Unscored —
    CVE-2011-3645 Public exploit

    Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights paramete…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote atta…

  • Unscored —

    NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local u…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.…

  • Unscored —

    NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetS…

  • Unscored —

    Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which all…

  • Unscored —

    Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remot…

  • Unscored —

    Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inj…

  • Unscored —
    CVE-2010-4845 Public exploit

    Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2010-4852 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2010-4849 Public exploit

    SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to …

  • Unscored —
    CVE-2010-4851 Public exploit

    Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-4846 Public exploit

    SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-4843 Public exploit

    SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execut…

  • Unscored —
    CVE-2010-4847 Public exploit

    SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-4844 Public exploit

    SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-4842 Public exploit

    SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remot…

  • Unscored —
    CVE-2010-4850 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scr…