Archive
December 2011
Vulnerabilities first published in this month (UTC), newest first.
87 results · Clear filters · Feed
-
Unscored —CVE-2011-4833 Public exploit
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6…
-
Unscored —
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote att…
-
Unscored —CVE-2011-4836 Public exploit
Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to injec…
-
Unscored —CVE-2011-4837 Public exploit
Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote at…
-
Unscored —CVE-2011-4830 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Joom…
-
Unscored —CVE-2011-4832 Public exploit
Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allo…
-
Unscored —CVE-2011-4829 Public exploit
SQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla! allows remote attack…
-
Unscored —
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tiny…
-
Unscored —CVE-2011-4834 Public exploit
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-…
-
Unscored —CVE-2011-4810 Public exploit
Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read …
-
Unscored —CVE-2011-4811 Public exploit
SQL injection vulnerability in pokaz_podkat.php in BestShopPro allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2011-4807 Public exploit
Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrar…
-
Unscored —CVE-2011-4806 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers…
-
Unscored —CVE-2011-4814 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to…
-
Unscored —CVE-2011-4801 Public exploit
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authenticat…
-
Unscored —CVE-2011-4809 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity) component before 1.01 for Joo…
-
Unscored —CVE-2011-4800 Public exploit
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and wr…
-
Unscored —CVE-2011-4803 Public exploit
SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute …
-
Unscored —CVE-2011-4813 Public exploit
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to rea…
-
Unscored —CVE-2011-4802 Public exploit
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to ex…
-
Unscored —
Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attac…
-
Unscored —CVE-2011-4808 Public exploit
SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attac…
-
Unscored —CVE-2011-4812 Public exploit
Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web …
-
Unscored —
Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote …
-
Unscored —CVE-2011-4712 Public exploit
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot…
-
Unscored —CVE-2011-4716 Public exploit
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read…
-
Unscored —CVE-2011-4714 Public exploit
Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files …
-
Unscored —CVE-2011-4709 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote …
-
Unscored —CVE-2011-4715 Public exploit
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLim…
-
Unscored —CVE-2011-4710 Public exploit
Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2011-4713 Public exploit
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read ar…
-
Unscored —CVE-2011-2917 Public exploit
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execu…
-
Unscored —
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote a…
-
Unscored —CVE-2011-4684 Public exploit
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vect…
-
High 8.8
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …
KEV Jun 8, 2022 -
Unscored —CVE-2011-4162 Public exploit
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless m…
-
Unscored —
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require a…
-
Unscored —CVE-2011-4673 Public exploit
SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to ex…
-
Unscored —CVE-2011-4672 Public exploit
Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2011-4674 Public exploit
SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows re…