20466 matches found
Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting
Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarfajax.php. id: CVE-2011-4336 info: name: Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting author: pikpikcu severity: medium description: Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site...
WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting
A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...
Advanced Text Widget < 2.0.2 - Cross-Site Scripting
A cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. id: CVE-2011-4618 info: name: Advanced Text Widget 2.0.2 - Cross-Site Scripting author:...
Skysa App Bar 1.04 - Cross-Site Scripting
A cross-site scripting vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. id: CVE-2011-5179 info: name: Skysa App Bar 1.04 - Cross-Site Scriptin...
Featurific For WordPress 1.6.2 - Cross-Site Scripting
A cross-site scripting vulnerability in cachedimage.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter. id: CVE-2011-5265 info: name: Featurific For WordPress 1.6.2 - Cross-Site Scripting author:...
WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)
A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. id: CVE-2011-1669 info: name: WP Custom Pages 0.5.0.1 - Local File Inclusion LFI...
Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection
The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...
CVE-2011-1473
creationtimestamp| type| source ---|---|--- 2026-08-19 13:30:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtngxdi72m...
ROOT-OS-DEBIAN-12-CVE-2011-4116 CVE-2011-4116 in perl - Patched by Root
Root has patched CVE-2011-4116 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2011-4916 CVE-2011-4916 in linux - Patched by Root
Root has patched CVE-2011-4916 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2011-4915 CVE-2011-4915 in linux - Patched by Root
Root has patched CVE-2011-4915 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2011-4917 CVE-2011-4917 in linux - Patched by Root
Root has patched CVE-2011-4917 in the linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2011-1137
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-07-30 00:02:01+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-08-01 14:00:05+00:00| seen|...
CVE-2011-4130
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-07-30 00:02:01+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-08-01 14:00:05+00:00| seen|...
Security Bulletin: Vulnerability in the TS3100/TS3200 Web User Interface could allow unauthorized library access (CVE-2011-1372)
Abstract Administrative access to the library may be obtained without supplying proper credentials. Content Security Bulletin: Vulnerability in the TS3100/TS3200 Web User Interface could allow unauthorized library access CVE-2011-1372 SUMMARY: Administrative access to the library may be obtained...
CVE-2011-3416
creationtimestamp| type| source ---|---|--- 2026-07-14 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqmz25xgrk2f...
Vulnerability-Assessment-and-Exploitation-Labs
Exploiting vsFTPd 2.3.4 Backdoor CVE-2011-2523 - Manual Walk...
CVE-2011-10043
creationtimestamp| type| source ---|---|--- 2026-07-07 17:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq35a4wvad2x 2026-07-07 19:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3e7727ll2z 2026-07-08 11:00:04+00:00| seen|...
DEBIAN-CVE-2011-10043
Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...