CVE-2011-5020

An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...

CVE-2011-5020

The CVE-2011-5020 issue is an SQL injection in the Online TV Database (2011) where the ID parameter is not properly validated. Connected CNVD-2020-02284 confirms a SQL injection vulnerability in the Online TV Database 2011, caused by a lack of validation of externally entered SQL statements. This...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2011-4595

CVE-2011-4595 concerns the Pretty-Link WordPress plugin. The vulnerability is a cross‑site scripting (XSS) flaw in the plugin’s language around the URL parameter of the pretty-bar.php script, allowing an attacker to inject arbitrary HTML/JavaScript into a user’s browser. Affected product/version:...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2011-5250

creationtimestamp| type| source ---|---|--- 2020-01-09 02:32:31+00:00| seen| https://t.me/cibsecurity/9054 2020-01-15 20:39:06+00:00| seen| https://t.me/cibsecurity/9217...

CVE-2011-5247

creationtimestamp| type| source ---|---|--- 2020-01-09 02:32:31+00:00| seen| https://t.me/cibsecurity/9055...

CVE-2011-5266

creationtimestamp| type| source ---|---|--- 2020-01-09 02:32:30+00:00| seen| https://t.me/cibsecurity/9053 2020-01-15 22:39:02+00:00| seen| https://t.me/cibsecurity/9225...

CVE-2011-5266

CVE-2011-5266 affects Imperva SecureSphere Web Application Firewall (WAF). The vulnerability allows bypass of SQL injection filters in versions prior to 12 August 2010. The CVSS metrics indicate high impact across confidentiality, integrity, and availability (NVD CVSS 2.0: base score 7.5; CVSS 3....

CVE-2011-5250

Snare for Linux prior to version 1.7.0 contains a cross‑site request forgery (CSRF) vulnerability in its web interface. The issue arises from improper implementation of the ChToken CSRF protection, which could allow an attacker to induce an authenticated user to perform unwanted actions via the w...

CVE-2011-5247

CVE-2011-5247 affects Snare for Linux prior to 1.7.0. The vulnerability arises in the web interface ( RemotePassword field in the /remote page); the password is disclosed by inspecting the page source, as the MD5 hash of the password is exposed. This constitutes an information disclosure vulnerab...

CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

CVE-2011-5018

Koala Framework is affected by a Cross-Site Scripting (XSS) vulnerability via the request_uri parameter in versions prior to 2011-11-21. The root cause, as described across multiple sources, is insufficient validation/ sanitization of client-side data. Impact is described as XSS, with no explicit...

CVE-2011-5018

Koala Framework before 2011-11-21 has XSS via the requesturi parameter...

alpnesstrail.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1062324 Security Researcher D34D Helped patch 275 vulnerabilities Received 5 Coordinated Disclosure badges Received 12 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting alpnesstrail.ch website and it...

CVE-2011-3585

creationtimestamp| type| source ---|---|--- 2019-12-31 22:56:33+00:00| seen| https://t.me/cibsecurity/8935 2025-02-05 14:32:32+00:00| seen| https://gist.github.com/krnowak/99bf3c7cb0c4eba1e9f4f6c5e3f1df00...

CVE-2011-3585

Multiple race conditions in the 1 mount.cifs and 2 umount.cifs programs in Samba 3.6 allow local users to cause a denial of service mounting outage via a SIGKILL signal during a time window when the /etc/mtab file exists...

CVE-2011-3585

Multiple race conditions in the 1 mount.cifs and 2 umount.cifs programs in Samba 3.6 allow local users to cause a denial of service mounting outage via a SIGKILL signal during a time window when the /etc/mtab file exists...

CVE-2011-3585

CVE-2011-3585 affects Samba 3.6 components (mount.cifs and umount.cifs). The issue is described as multiple race conditions that allow a local user to cause a denial of service (mounting outage) by sending SIGKILL during a window when /etc/mtab~ exists. The vulnerability is documented with local ...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0264)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - The bnepsockioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\...