Archive
November 2011
Vulnerabilities first published in this month (UTC), newest first.
309 results · Feed
-
Unscored —
Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 t…
-
Unscored —
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to …
-
Unscored —
The dissect_infiniband_common function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark …
-
Unscored —
The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3…
-
Unscored —
The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote a…
-
Unscored —CVE-2011-4273 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrar…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows rem…
-
Unscored —
Unspecified vulnerability in Twilight Frontier Touhou Hisouten 1.06 and earlier allows remote attackers to cause a deni…
-
Unscored —
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Mo…
-
Unscored —CVE-2010-4998 Public exploit
PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remot…
-
Unscored —CVE-2010-4971 Public exploit
Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attac…
-
Unscored —CVE-2010-4997 Public exploit
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2010-5039 Public exploit
SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attacker…
-
Unscored —CVE-2010-5004 Public exploit
SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to ex…
-
Unscored —CVE-2010-5027 Public exploit
Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote …
-
Unscored —CVE-2010-5040 Public exploit
PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus all…
-
Unscored —CVE-2010-5045 Public exploit
Cross-site scripting (XSS) vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbi…
-
Unscored —CVE-2010-5025 Public exploit
Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to …
-
Unscored —CVE-2010-5016 Public exploit
SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2010-5017 Public exploit
SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2010-5000 Public exploit
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute a…
-
Unscored —CVE-2010-5044 Public exploit
SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remo…
-
Unscored —CVE-2010-5023 Public exploit
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbit…
-
Unscored —CVE-2010-5032 Public exploit
SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers…
-
Unscored —
Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers…
-
Unscored —CVE-2010-5009 Public exploit
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2010-5035 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2010-5041 Public exploit
SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute a…
-
Unscored —CVE-2010-5015 Public exploit
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute ar…
-
Unscored —
SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2010-5013 Public exploit
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows re…
-
Unscored —CVE-2010-5029 Public exploit
SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2010-5018 Public exploit
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2010-5008 Public exploit
SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to…
-
Unscored —CVE-2010-5037 Public exploit
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2010-5022 Public exploit
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote a…
-
Unscored —CVE-2010-5024 Public exploit
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, w…