CVE-2011-1489

creationtimestamp| type| source ---|---|--- 2019-11-20 20:26:18+00:00| seen| https://t.me/cibsecurity/8232 2024-02-14 09:26:48+00:00| seen| https://t.me/ctinow/184494...

CVE-2011-1490

creationtimestamp| type| source ---|---|--- 2019-11-20 20:26:18+00:00| seen| https://t.me/cibsecurity/8231 2024-02-14 09:26:49+00:00| seen| https://t.me/ctinow/184495...

CVE-2011-4455

CVE-2011-4455: Multiple XSS vulnerabilities in Tiki Wiki CMS Groupware up to version 7.2 and earlier allow remote attackers to inject arbitrary scripts via the path info to tiki-admin_system.php, tiki-pagehistory.php, tiki-removepage.php, or tiki-rename_page.php. Affected software is Tiki 6/7 ser...

CVE-2011-4454

The CVE-2011-4454 entry corresponds to multiple XSS vulnerabilities in Tiki Wiki CMS Groupware, affected through path-info in 8.0 RC1 and earlier (tiki-remind_password.php, tiki-index.php, tiki-login_scr.php, tiki-index). The root cause is improper handling of path input leading to injection of a...

CVE-2011-0529

creationtimestamp| type| source ---|---|--- 2019-11-20 18:31:32+00:00| seen| https://t.me/cibsecurity/8226...

CVE-2011-1028

The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...

CVE-2011-1028

The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...

CVE-2011-1028

The documents collectively describe a vulnerability in Smarty3 involving the $smarty.template variable, which can allow attackers to potentially execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. Core details across sources confirm this is a P...

CVE-2011-1028

The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...

CVE-2011-1145

creationtimestamp| type| source ---|---|--- 2019-11-20 00:26:16+00:00| seen| https://t.me/cibsecurity/8211 2024-02-14 09:26:46+00:00| seen| https://t.me/ctinow/184492...

CVE-2011-3350

masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...

CVE-2011-3350

masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...

CVE-2011-3352

The CVE-2011-3352 entry describes a cross-site scripting (XSS) flaw in Zikula 1.3.0 build #3168 and probably earlier, caused by improper sanitization of the 'themename' parameter when managing themes. A remote attacker with Zikula administrator privileges could inject arbitrary HTML or web script...

CVE-2011-3350

masqmail versions 0.2.21–0.2.30 improperly call seteuid() in src/log.c and src/masqmail.c, resulting in improper privilege dropping. Affected by this is the ability to retain elevated privileges when dropping privileges, with no remediation details provided in the supplied documents. This vulnera...

CVE-2011-3350

Removed by vendor...

CVE-2011-3349

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

CVE-2011-3349

LightDM before 0.9.6 writes in .dmrc and Xauthority files with root permissions while the files are in user-controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation. Exploitation status is not provided in the linked documents; no...

CVE-2011-3349

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...