December 2011

340 results · Feed

• Unscored —
  CVE-2011-4051 Public exploit EPSS 68%

  CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require a…

  Dec 5, 2011
• Unscored —
  CVE-2011-2397

  The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted…

  Dec 5, 2011
• Unscored —
  CVE-2011-4673 Public exploit

  SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to ex…

  Web / CMS
  Dec 2, 2011
• Unscored —
  CVE-2011-4672 Public exploit

  Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQ…

  Dec 2, 2011
• Unscored —
  CVE-2011-4674 Public exploit

  SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows re…

  zabbix Debian
  Dec 2, 2011
• Unscored —
  CVE-2011-4671 Public exploit

  SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8,…

  Dec 2, 2011
• Unscored —
  CVE-2011-4669

  SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows rem…

  Dec 2, 2011
• Unscored —
  CVE-2011-4670 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject ar…

  Dec 2, 2011
• Unscored —
  CVE-2011-4034 Public exploit EPSS 13%

  Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier,…

  Dec 2, 2011
• Unscored —
  CVE-2011-4035

  Cross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 a…

  Dec 2, 2011
• Unscored —
  CVE-2011-4668

  IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to…

  Dec 2, 2011
• Unscored —
  CVE-2011-4033

  Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier,…

  Dec 2, 2011
• Unscored —
  CVE-2011-4545 Public exploit

  CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrar…

  Dec 2, 2011
• Unscored —
  CVE-2011-4036

  Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earl…

  Dec 2, 2011
• Unscored —
  CVE-2011-4540 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source edition) 1.04 allow remote a…

  Dec 1, 2011
• Unscored —
  CVE-2011-4544 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inject arbitrary…

  Dec 1, 2011
• Unscored —
  CVE-2011-4161 EPSS 14%

  The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxx…

  Dec 1, 2011
• Unscored —
  CVE-2011-4001

  Directory traversal vulnerability in HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to read and modify…

  Dec 1, 2011
• Low —
  CVE-2011-4344

  Jenkins allows Cross-Site Scripting (XSS)

  Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.

  org.jenkins-ci.main:jenkins-core Maven
  Dec 1, 2011
• Unscored —
  CVE-2011-2461 Public exploit

  Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject…

  Dec 1, 2011