Skip to content
OpenAdvisories

Archive

September 2011

Vulnerabilities first published in this month (UTC), newest first.

← August 2011 2011 / September October 2011 →
  1. 1 
  2. 219
  3. 3 
  4. 4 
  5. 5 
  6. 618
  7. 7 
  8. 88
  9. 99
  10. 103
  11. 111
  12. 12 
  13. 1312
  14. 145
  15. 1533
  16. 1618
  17. 1738
  18. 18 
  19. 192
  20. 209
  21. 218
  22. 229
  23. 2368
  24. 2467
  25. 25 
  26. 26 
  27. 2725
  28. 2816
  29. 2914
  30. 305
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2011-3712

    CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file

    CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.

    cakephp/cakephp Packagist
  • Medium 5.3
    CVE-2011-3744

    HTML Purifier allows remote attackers to obtain sensitive information

    HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files.

    ezyang/htmlpurifier php-htmlpurifier Ubuntu Packagist
  • Medium —
    CVE-2011-1411

    Improper Authentication in OpenSAML

    Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

    org.opensaml:opensaml Maven