Skip to content
OpenAdvisories

Archive

16 December 2011

Vulnerabilities first published on this day (UTC), newest first.

59 results · Feed

  • Unscored —

    Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute…

  • Unscored —

    The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain re…

  • Unscored —

    The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag i…

  • Unscored —

    Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, whi…

  • Unscored —

    The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a c…

  • Unscored —

    The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string da…

  • Unscored —

    Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business P…

  • Unscored —

    The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie h…

  • Unscored —

    The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates a password form field without disabling th…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Sma…

  • Unscored —

    The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends incorrect Content-Type headers…

  • Unscored —

    The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which …

  • Unscored —

    The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match…

  • Unscored —

    Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests w…

  • Unscored —

    The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mai…

  • Unscored —

    The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are …

  • Unscored —

    The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obt…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_…

  • Unscored —

    SQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attacke…