Skip to content
OpenAdvisories

Archive

5 October 2011

Vulnerabilities first published on this day (UTC), newest first.

28 results · Feed

  • Unscored —
    CVE-2011-3368 Public exploit EPSS 91%

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…

  • Unscored —
    CVE-2010-4866 Public exploit

    SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4855 Public exploit

    SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —

    SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2010-4862 Public exploit

    SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote a…

  • Unscored —
    CVE-2010-4856 Public exploit

    SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2010-4860 Public exploit

    SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-4864 Public exploit

    SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to exec…

  • Unscored —
    CVE-2010-4865 Public exploit

    SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-4868 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote att…

  • Unscored —
    CVE-2010-4869 Public exploit

    SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2010-4858 Public exploit

    Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2010-4867 Public exploit

    Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers …

  • Unscored —
    CVE-2010-4863 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to injec…

  • Unscored —
    CVE-2010-4857 Public exploit

    SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-4861 Public exploit

    SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-4853 Public exploit

    SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute…

  • Unscored —

    SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5…

  • Unscored —

    net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NU…

  • Unscored —
    CVE-2011-1159 Public exploit

    acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but…

  • Unscored —

    Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security …

  • Unscored —

    Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remot…

  • Unscored —

    The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, …

  • Unscored —

    SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remo…

  • Unscored —

    The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through sn…

  • Unscored —
    CVE-2008-7301 Public exploit

    SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL command…

  • Unscored —

    The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0…