20519 matches found
CVE-2011-4090
Summary: CVE-2011-4090 is tied to Serendipity before 1.6 with an XSS in the karma plugin that may lead to privilege escalation. The vulnerability affects the karma plugin in Serendipity installations prior to version 1.6 (no other products explicitly documented). The underlying issue is a cross-s...
CVE-2011-4082
CVE-2011-4082 affects phpLDAPadmin prior to 0.9.8. The issue is a local file inclusion flaw introduced by how the Accept-Language HTTP header is processed, allowing a remote attacker to cause a denial of service via a specially crafted request. Exploitation is described as network-based, with imp...
CVE-2011-4076
OpenStack Nova before 2012.1 is affected: if a user possesses an EC2_ACCESS_KEY (like a username), they may derive the EC2_SECRET_KEY (password). Exposing the EC2_ACCESS_KEY over HTTP or via tools that enable MITM over HTTPS could allow an attacker to obtain the secret key; brute-forcing EC2_ACCE...
CVE-2011-3632
CVE-2011-3632 affects the hardlink utility prior to version 0.1.2, where operations on full filesystem object path names enable local attackers to perform symlink attacks. The provided documents do not specify affected distributions, exact vulnerable files, or a confirmed patch/mitigation. No exp...
CVE-2011-3631
CVE-2011-3631 describes a vulnerability in hardlink before 0.1.2 where multiple integer overflows lead to heap-based buffer overflows during memory space calculation due to how string lengths are concatenated. A remote attacker could craft a directory tree and persuade a local user to consolidate...
CVE-2011-3630
CVE-2011-3630 concerns the hardlink project prior to version 0.1.2, which is affected by multiple stack-based buffer overflow flaws when processing deeply nested directory trees. According to the connected NVD entry, a remote attacker can craft a directory tree and trick the local user into conso...
CVE-2011-3630
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink...
CVE-2011-3624
CVE-2011-3624 affects WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier. The vulnerability arises because these methods do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers, which could allow remote attackers to inject arbitrary text into log files or to byp...
CVE-2011-3617
CVE-2011-3617 affects Tahoe-LAFS versions 1.3.0 through 1.8.2. The vulnerability could allow unauthorized users to delete immutable files in some cases. The provided connected documents do not specify the exact root cause, affected component details, exploitation method, or remediation patches. N...
CVE-2011-3355
creationtimestamp| type| source ---|---|--- 2019-11-26 02:32:22+00:00| seen| https://t.me/cibsecurity/8313 2024-02-27 17:51:21+00:00| seen| https://t.me/ctinow/194667...
CVE-2011-3373
creationtimestamp| type| source ---|---|--- 2019-11-26 02:32:18+00:00| seen| https://t.me/cibsecurity/8312 2024-02-27 17:51:22+00:00| seen| https://t.me/ctinow/194668...
CVE-2011-3583
creationtimestamp| type| source ---|---|--- 2019-11-26 02:32:17+00:00| seen| https://t.me/cibsecurity/8310 2024-02-27 18:22:27+00:00| seen| https://t.me/ctinow/194691...
CVE-2011-3374
creationtimestamp| type| source ---|---|--- 2019-11-26 02:32:17+00:00| seen| https://t.me/cibsecurity/8311 2024-02-27 17:51:23+00:00| seen| https://t.me/ctinow/194669...
CVE-2011-3584
creationtimestamp| type| source ---|---|--- 2019-11-26 02:32:16+00:00| seen| https://t.me/cibsecurity/8309...
CVE-2011-3609
CVE-2011-3609 describes a CSRF flaw in JBoss Application Server 7.x prior to 7.1.0 where access to management console information was not properly restricted (e.g., via Access-Control-Allow-Origin). This can enable an unauthorized information leak when an admin user visits a malicious page. The p...
CVE-2011-3606
CVE-2011-3606 affects JBoss Application Server 7.x prior to 7.1.0 Beta 1 in its administration console. It is a DOM-based cross-site scripting flaw: a remote attacker can lure a privileged administrator to a crafted page, causing DOM environment modification and arbitrary HTML/script execution. E...
CVE-2011-3606
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DO...
CVE-2011-3351
creationtimestamp| type| source ---|---|--- 2019-11-26 00:32:35+00:00| seen| https://t.me/cibsecurity/8306 2024-02-27 17:21:19+00:00| seen| https://t.me/ctinow/194631...
