16 December 2011

59 results · Feed

• Unscored —
  CVE-2011-4857

  Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary…

  Dec 16, 2011
• Unscored —
  CVE-2011-4369

  Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader an…

  Dec 16, 2011
• Unscored —
  CVE-2011-3834

  Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary …

  Dec 16, 2011
• Unscored —
  CVE-2011-4760

  Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for corresp…

  Dec 16, 2011
• Unscored —
  CVE-2011-4757

  Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature,…

  Dec 16, 2011
• Unscored —
  CVE-2011-4852

  The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates web pages containing external links in res…

  Dec 16, 2011
• Unscored —
  CVE-2011-4725

  Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build10111103…

  Dec 16, 2011
• Unscored —
  CVE-2011-4777

  Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4_b…

  Dec 16, 2011
• Unscored —
  CVE-2011-4755

  Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an X…

  Dec 16, 2011
• Unscored —
  CVE-2011-4747

  The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not prevent the use of weak ciphers for SSL…

  Dec 16, 2011
• Unscored —
  CVE-2011-4855

  The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter fo…

  Dec 16, 2011
• Unscored —
  CVE-2011-4741

  The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database connection string within a web …

  Dec 16, 2011
• Unscored —
  CVE-2011-4739

  The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling t…

  Dec 16, 2011
• Unscored —
  CVE-2011-4731

  The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP address with…

  Dec 16, 2011
• Unscored —
  CVE-2011-4746

  The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which mak…

  Dec 16, 2011
• Unscored —
  CVE-2011-4754

  Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attacke…

  Dec 16, 2011
• Unscored —
  CVE-2011-4749

  The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 generates a password form field without disablin…

  Dec 16, 2011
• Unscored —
  CVE-2011-4734

  Multiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow rem…

  Dec 16, 2011
• Unscored —
  CVE-2011-4748

  The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e-mail addresses that a…

  Dec 16, 2011
• Unscored —
  CVE-2011-4768

  The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header'…

  Dec 16, 2011
• Unscored —
  CVE-2011-4758

  Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers …

  Dec 16, 2011
• Unscored —
  CVE-2011-4732

  The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 omits the Content-Type header's char…

  Dec 16, 2011
• Unscored —
  CVE-2011-4776

  Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.…

  Dec 16, 2011
• Unscored —
  CVE-2011-4735

  Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407…

  Dec 16, 2011
• Unscored —
  CVE-2011-4752

  SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote…

  Dec 16, 2011
• Unscored —
  CVE-2011-4848

  The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes a submitted password within an HTTP respons…

  Dec 16, 2011
• Unscored —
  CVE-2011-4738

  The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie …

  Dec 16, 2011
• Unscored —
  CVE-2011-4853

  The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes an RFC 1918 IP address within a web page, w…

  Dec 16, 2011
• Unscored —
  CVE-2011-4761

  Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, wh…

  Dec 16, 2011
• Unscored —
  CVE-2011-4737

  The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP respon…

  Dec 16, 2011
• Unscored —
  CVE-2011-4751

  SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query…

  Dec 16, 2011
• Unscored —
  CVE-2011-4762

  Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might all…

  Dec 16, 2011
• Unscored —
  CVE-2011-4849

  The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an http…

  Dec 16, 2011
• Unscored —
  CVE-2011-4750

  Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inj…

  Dec 16, 2011
• Unscored —
  CVE-2011-4730

  The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 generates a password form field with…

  Dec 16, 2011
• Unscored —
  CVE-2011-4765

  The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly …

  Dec 16, 2011
• Unscored —
  CVE-2011-4743

  The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter f…

  Dec 16, 2011
• Unscored —
  CVE-2011-4745

  Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1_build1013110…

  Dec 16, 2011
• Unscored —
  CVE-2011-4740

  The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in re…

  Dec 16, 2011
• Unscored —
  CVE-2011-4856

  The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain res…

  Dec 16, 2011