Skip to content
OpenAdvisories

Archive

6 December 2011

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arb…

  • Unscored —
    CVE-2011-4130 EPSS 13%

    Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute …

  • Unscored —

    Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to a…

  • Unscored —

    One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easie…

  • Unscored —

    The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts …

  • Unscored —

    One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticat…

  • Unscored —

    One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) …