Archive
5 October 2011
Vulnerabilities first published on this day (UTC), newest first.
28 results · Feed
-
Unscored —
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…
-
Unscored —CVE-2010-4866 Public exploit
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2010-4855 Public exploit
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2010-4862 Public exploit
SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote a…
-
Unscored —CVE-2010-4856 Public exploit
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2010-4860 Public exploit
SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2010-4864 Public exploit
SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to exec…
-
Unscored —CVE-2010-4865 Public exploit
SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to …
-
Unscored —CVE-2010-4868 Public exploit
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote att…
-
Unscored —CVE-2010-4869 Public exploit
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2010-4858 Public exploit
Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary f…
-
Unscored —CVE-2010-4867 Public exploit
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers …
-
Unscored —CVE-2010-4863 Public exploit
Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to injec…
-
Unscored —CVE-2010-4857 Public exploit
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2010-4861 Public exploit
SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2010-4853 Public exploit
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute…
-
Unscored —
SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5…
-
Unscored —
net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NU…
-
Unscored —CVE-2011-1159 Public exploit
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but…
-
Unscored —
Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security …
-
Unscored —
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remot…
-
Unscored —
The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, …
-
Unscored —
SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remo…
-
Unscored —
The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through sn…
-
Unscored —CVE-2008-7301 Public exploit
SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL command…
-
Unscored —
The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0…