Skip to content
OpenAdvisories

Archive

3 January 2012

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —

    etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value fo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inj…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet …

  • Unscored —
    CVE-2011-4643 Public exploit

    Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitr…

  • Unscored —
    CVE-2011-4642 Public exploit EPSS 29%

    mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Pytho…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject a…

  • Unscored —
    CVE-2011-4644 Public exploit

    Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an envi…