Skip to content
OpenAdvisories

Archive

24 December 2011

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —
    CVE-2011-4362 Public exploit EPSS 21%

    Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lightt…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script …

  • Unscored —

    The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hb…

  • Unscored —

    Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —

    Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitr…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentica…

  • Unscored —

    imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentic…

  • Unscored —

    RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corrupti…