Skip to content
OpenAdvisories

Archive

November 2011

Vulnerabilities first published in this month (UTC), newest first.

309 results · Feed

  • Unscored —
    CVE-2010-4980 Public exploit

    SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-4992 Public exploit

    SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-4995 Public exploit

    SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to e…

  • Unscored —
    CVE-2010-4986 Public exploit

    SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execut…

  • Unscored —
    CVE-2010-4984 Public exploit

    SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-4979 Public exploit

    SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2010-4989 Public exploit

    SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-4976 Public exploit

    Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-4978 Public exploit

    Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2010-4970 Public exploit

    SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-4996 Public exploit

    SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-4991 Public exploit

    SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to exe…

  • Unscored —
    CVE-2010-4999 Public exploit

    SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-5001 Public exploit

    SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-5002 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remo…

  • Unscored —
    CVE-2010-5003 Public exploit

    SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attacker…

  • Unscored —

    Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(…

  • Unscored —

    SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attack…

  • Unscored —
    CVE-2011-4220 Public exploit

    Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows re…

  • Unscored —
    CVE-2011-4221 Public exploit

    Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a den…

  • Unscored —

    Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a d…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attacker…

  • Unscored —

    Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service …

  • Unscored —

    SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allo…

  • Unscored —

    Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allow…

  • Unscored —
    CVE-2011-4222 Public exploit

    Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a d…

  • Unscored —

    Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote…

  • Unscored —

    Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows re…

  • Unscored —

    OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obta…