Skip to content
OpenAdvisories

Archive

September 2011

Vulnerabilities first published in this month (UTC), newest first.

75 results · Clear filters · Feed

  • Unscored —
    CVE-2011-3489 Public exploit

    RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2011-3494 Public exploit EPSS 56%

    WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly e…

  • Unscored —
    CVE-2011-3493 Public exploit

    Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow rem…

  • Unscored —
    CVE-2011-3486 Public exploit EPSS 50%

    Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to …

  • Unscored —
    CVE-2011-3491 Public exploit EPSS 16%

    Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial…

  • Unscored —
    CVE-2011-3488 Public exploit

    Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2011-3490 Public exploit EPSS 36%

    Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers t…

  • Unscored —
    CVE-2011-3487 Public exploit

    Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers …

  • Unscored —
    CVE-2011-3322 Public exploit EPSS 65%

    Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allow…

  • Unscored —
    CVE-2011-3393 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attacker…

  • Unscored —
    CVE-2011-3394 Public exploit

    SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2011-1984 Public exploit

    WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by …

  • Unscored —
    CVE-2011-1892 Public exploit EPSS 41%

    Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoi…

  • Unscored —
    CVE-2011-2595 Public exploit EPSS 60%

    Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2011-2201 Public exploit

    The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly pr…

  • Unscored —
    CVE-2010-4835 Public exploit

    Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated user…

  • Unscored —
    CVE-2010-4838 Public exploit

    SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated user…

  • Unscored —
    CVE-2010-4837 Public exploit

    Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attac…

  • Unscored —
    CVE-2010-4834 Public exploit

    Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition all…

  • Unscored —
    CVE-2010-4836 Public exploit

    Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2010-4839 Public exploit

    SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to …

  • Unscored —
    CVE-2009-5098 Public exploit

    The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote a…

  • Unscored —
    CVE-2009-5088 Public exploit

    SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-5091 Public exploit

    SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-5090 Public exploit

    SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2009-5089 Public exploit

    Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2009-5093 Public exploit

    Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2009-5095 Public exploit

    PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute a…

  • Unscored —
    CVE-2009-5094 Public exploit

    SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-5087 Public exploit

    Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote att…

  • Unscored —
    CVE-2011-3389 Public exploit EPSS 73%

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

  • Unscored —
    CVE-2011-3200 Public exploit EPSS 21%

    Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before…

  • Unscored —
    CVE-2011-3390 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix a…

  • Unscored —
    CVE-2011-1944 Public exploit EPSS 13%

    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, all…

  • Unscored —
    CVE-2011-2763 Public exploit EPSS 36%

    The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitr…