BELL-CVE-2011-3346 CVE-2011-3346 does not affect BellSoft software

Bulletin has no description...

CVE-2011-4573

Red Hat JBoss Operations Network (JON) 2.4.1 and earlier versions are affected by CVE-2011-4573. The flaw allows remote authenticated users to bypass modify resource permissions when deleting a plug-in configuration update from the group connection properties history, enabling deletion from the a...

CVE-2011-4573

Red Hat JBoss Operations Network JON before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail...

CVE-2011-3346

CVE-2011-3346 affects QEMU up to version 0.15.2 (SCSI subsystem, hw/scsi-disk.c) when used with Xen. A crafted SAI READ CAPACITY command could cause a local guest denial of service (guest crash) for users with access to the CD-ROM, and is conditioned on root having modified certain permissions/AC...

Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)

A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...

Internet Explorer Selection Object Memory Corruption (MS11-050) - Ver2 (CVE-2011-1261)

This is a remote code execution vulnerability. When Internet Explorer attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user. Successful exploitation of...

HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)

A cross-site scripting vulnerability has been reported in Hp Network Node Manager I. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)

A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to a heap buffer overflow while handling a malformed AVI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HP Managed printing Administration jobAcct Remote Command Execution - Ver2 (CVE-2011-4166)

A command execution vulnerability has been reported in Hp Managed Printing Administration. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

CVE-2011-3197

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domaininfo.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272...

CVE-2011-3197

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domaininfo.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272...

CVE-2011-5276

SQL injection vulnerability in the drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the databasename parameter...

Sql injection

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domaininfo.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272...

Sql injection

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vpsnote parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different...

CVE-2011-5274

The drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkgdirectory parameter in a doinstall action to dtc/...

CVE-2011-5274

The CVE-2011-5274 issue affects Domain Technologie Control (DTC) before version 0.32.11, where the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter during a do...

CVE-2011-3196

The CVE-2011-3196 issue affects Domain Technologie Control (DTC) prior to version 0.34.1. The root cause is world-readable permissions on /etc/apache2/apache2.conf, which allowed local users to read a configuration file and obtain the dtcdaemons MySQL password. Impact was local, with confidential...

CVE-2011-3199

CVE-2011-3199 affects Domain Technologie Control (DTC) prior to version 0.34.1. The vulnerability is a set of cross-site scripting (XSS) flaws allowing remote authenticated users to inject arbitrary web script or HTML via the (1) message body of a support ticket or (2) DNS and (3) MX form, demons...

CVE-2011-3197

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domaininfo.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272...

CVE-2011-3198

DTV/CVE-2011-3198 affects Domain Technologie Control (DTC) prior to version 0.34.1. The vulnerability arises from DTC passing a password via the -b option to htpasswd, which could allow a local attacker to read thepassword by inspecting the running process or /proc arguments. Documents from NVD a...