October 2011

109 results · Clear filters · Feed

• Unscored —
  CVE-2010-4876 Public exploit

  SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL command…

  Oct 7, 2011
• Unscored —
  CVE-2010-4872 Public exploit

  SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL …

  Oct 7, 2011
• Unscored —
  CVE-2010-4875 Public exploit

  Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery …

  Oct 7, 2011
• Unscored —
  CVE-2010-4873 Public exploit

  Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary w…

  Oct 7, 2011
• Unscored —
  CVE-2010-4882 Public exploit

  Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web…

  Oct 7, 2011
• Unscored —
  CVE-2011-3305 Public exploit EPSS 22%

  Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to rea…

  Oct 6, 2011
• Unscored —
  CVE-2011-3368 Public exploit EPSS 91%

  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…

  apache2 Debian
  Oct 5, 2011
• Unscored —
  CVE-2010-4866 Public exploit

  SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL command…

  Oct 5, 2011
• Unscored —
  CVE-2010-4855 Public exploit

  SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the…

  Oct 5, 2011
• Unscored —
  CVE-2010-4862 Public exploit

  SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote a…

  Oct 5, 2011
• Unscored —
  CVE-2010-4856 Public exploit

  SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via t…

  Oct 5, 2011
• Unscored —
  CVE-2010-4860 Public exploit

  SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL c…

  Oct 5, 2011
• Unscored —
  CVE-2010-4864 Public exploit

  SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to exec…

  Oct 5, 2011
• Unscored —
  CVE-2010-4865 Public exploit

  SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to …

  Oct 5, 2011
• Unscored —
  CVE-2010-4868 Public exploit

  Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote att…

  Oct 5, 2011
• Unscored —
  CVE-2010-4869 Public exploit

  SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via …

  Oct 5, 2011
• Unscored —
  CVE-2010-4858 Public exploit

  Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary f…

  Oct 5, 2011
• Unscored —
  CVE-2010-4867 Public exploit

  Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers …

  Oct 5, 2011
• Unscored —
  CVE-2010-4863 Public exploit

  Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to injec…

  Oct 5, 2011
• Unscored —
  CVE-2010-4857 Public exploit

  SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands …

  Oct 5, 2011
• Unscored —
  CVE-2010-4861 Public exploit

  SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands …

  Oct 5, 2011
• Unscored —
  CVE-2010-4853 Public exploit

  SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute…

  Oct 5, 2011
• Unscored —
  CVE-2011-1159 Public exploit

  acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but…

  acpid Debian
  Oct 5, 2011
• Unscored —
  CVE-2008-7301 Public exploit

  SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL command…

  Oct 5, 2011
• Unscored —
  CVE-2011-2443 Public exploit EPSS 14%

  Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of servi…

  Oct 4, 2011
• Unscored —
  CVE-2011-3981 Public exploit EPSS 10%

  PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote atta…

  Oct 4, 2011
• Unscored —
  CVE-2011-3976 Public exploit EPSS 31%

  Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long fil…

  Oct 4, 2011
• Unscored —
  CVE-2011-3979 Public exploit

  Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module …

  Oct 4, 2011
• Medium —
  CVE-2011-2894 Public exploit

  Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

  Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untru…

  org.springframework.security:spring-security-core org.springframework:spring-core Maven
  Oct 4, 2011