CVE-2011-3336

regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion...

CVE-2011-3336

CVE-2011-3336 affects the BSD libc regcomp implementation. Public details confirm a denial-of-service condition caused by stack exhaustion/recursion when compiling regular expressions, with PoCs observed in MacOSX Safari/Firefox and related tooling. Red Hat and Ubuntu advisories note OS-level imm...

CVE-2011-3336

regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion...

CVE-2011-2499

Mambo CMS through 4.6.5 has multiple XSS...

CVE-2011-2343

Technical details about CVE-2011-2343 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-4338

CVE-2011-4338 affects Shaman 1.0.9. The vulnerability arises when a user adds the line askforpwd=false to shaman.conf, allowing root privileges on the next run without entering the root password. Public documents from Red Hat and NVD confirm the issue and impact (local privilege escalation with c...

CVE-2011-4938

creationtimestamp| type| source ---|---|--- 2020-02-12 00:37:06+00:00| seen| https://t.me/cibsecurity/9775...

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

Overview IBM ServeRAID Manager version 9.30-17006 and prior exposes a Java RMI that allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IBM ServeRAID Manager includes an embedded instance of Java version 1.4.2. Both ServeRAID Manager and Java...

Security Bulletin: Security vulnerabilities have been identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2017-1583, CVE-2011-4343)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Multipl...

CVE-2011-4938

CVE-2011-4938 affects Ariadne 2.7.6, with multiple XSS vulnerabilities that allow remote injection of arbitrary web script or HTML via PATH_INFO to index.php and loader.php. The vulnerability is caused by improper handling of PATH_INFO inputs, leading to script execution under the context of the ...

CVE-2011-1596

CVE-2011-1596 entry is rejected/not used and does not represent an active vulnerability.

CVE-2011-1596

...

CVE-2011-3642

Cross-site scripting XSS vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system news extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin...

CVE-2011-3642

Summary : CVE-2011-3642 is an XSS flaw in Flowplayer Flash (versions 3.2.7–3.2.16) used by the TYPO3 News system extension (and Mahara). An attacker can inject arbitrary script/HTML via the plugin configuration directive that references an external domain plugin, potentially compromising site use...

CVE-2011-3642

Cross-site scripting XSS vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system news extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin...

CVE-2011-1084

creationtimestamp| type| source ---|---|--- 2020-02-08 00:33:09+00:00| seen| https://t.me/cibsecurity/9711...

CVE-2011-1086

creationtimestamp| type| source ---|---|--- 2020-02-08 00:33:08+00:00| seen| https://t.me/cibsecurity/9709...

CVE-2011-1085

creationtimestamp| type| source ---|---|--- 2020-02-08 00:33:08+00:00| seen| https://t.me/cibsecurity/9710...

CVE-2011-1085

CSRF vulnerability in Smoothwall Express 3...

CVE-2011-1086

CVE-2011-1086 is an XSS vulnerability in Openfiler 2.3, affecting the admin/system.html page and exploitable via the device parameter to inject arbitrary script/HTML. The connected documents corroborate the issue across sources (NVD, Red Hat, CVE records, CNVD, etc.). The available materials do n...