20519 matches found
Dovecot 2.0.x < 2.0.16 Man In The Middle Vulnerability
Dovecot is prone to a man-in-the-middle vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...
CVE-2013-2011
creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:10+00:00| seen| https://t.me/cibsecurity/8862 2024-03-17 10:46:47+00:00| seen| https://t.me/ctinow/209857...
CVE-2011-1474
creationtimestamp| type| source ---|---|--- 2019-12-26 22:50:06+00:00| seen| https://t.me/cibsecurity/8859 2024-03-17 10:16:25+00:00| seen| https://t.me/ctinow/209847...
CVE-2013-2011
CVE-2013-2011 affects the WordPress plugin W3 Super Cache (aka WP Super Cache) for versions before 1.3.2. The issue is a PHP code-execution vulnerability caused by an incomplete fix from CVE-2013-2009, allowing remote attackers to inject arbitrary code. Affected: WordPress/W3 Super Cache plugin p...
CVE-2011-1474
CVE-2011-1474 affects pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. The root cause is a bad bounds check in arch_get_unmapped_area_topdown triggered by mmap after a MAP_GROWSDOWN mmap, which can loop indefinitely and not release the VM semaphore, potent...
vsftpd OS Command Injection Vulnerability
vsftpd is an FTP File Transfer Protocol server for Unix-like systems. An operating system command injection vulnerability exists in vsftpd version 2.3.4 downloaded between June 30, 2011 and July 3, 2011, which originates from a backdoor in the software that can be used to open a shell, which can ...
Ruby OpenSSL extension encryption issue vulnerability
Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the software developer Yukihiro Matsumoto. openSSL extension is an OpenSSL security extension used in it. A cryptographic issue exists in the OpenSSL extension in Ruby versions 2011-09-01 through 2011-11-03,...
NewStart CGSL CORE 5.04 / MAIN 5.04 : rsyslog Vulnerability (NS-SA-2019-0225)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rsyslog packages installed that are affected by a vulnerability: - Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might...
CVE-2011-2515
creationtimestamp| type| source ---|---|--- 2019-11-28 00:31:22+00:00| seen| https://t.me/cibsecurity/8384 2024-02-28 16:41:41+00:00| seen| https://t.me/ctinow/195631...
CVE-2011-2717
creationtimestamp| type| source ---|---|--- 2019-11-28 00:31:20+00:00| seen| https://t.me/cibsecurity/8382...
CVE-2011-2207
creationtimestamp| type| source ---|---|--- 2019-11-27 22:36:21+00:00| seen| https://t.me/cibsecurity/8379...
CVE-2011-2480
creationtimestamp| type| source ---|---|--- 2019-11-27 22:36:20+00:00| seen| https://t.me/cibsecurity/8378...
CVE-2011-2717
The DHCPv6 client dhcp6c as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...
CVE-2011-2515
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code...
CVE-2011-2515
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code...
CVE-2011-2523
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp...
CVE-2011-2717
CVE-2011-2717 affects the DHCPv6 client (dhcp6c) used in the dhcpv6 project up to 2011-07-25. The underlying issue is shell metacharacter handling in a hostname received from a DHCPv6 message, allowing remote DHCP servers to execute arbitrary commands via that hostname. The connected documents co...
CVE-2011-2523
CVE-2011-2523 affects vsftpd 2.3.4, where a compromised distribution contained a backdoor that, when a login uses a username including :), opens a root shell on TCP port 6200. Public PoCs and exploits (e.g., OS command injection/backdoor modules) demonstrate remote command execution via the backd...
