CVE-2011-5227

Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...

CVE-2011-5225

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5217

Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5232

CVE-2011-5232 is rejected/not used; this candidate is a duplicate of CVE-2012-0025.

CVE-2011-5225

CVE-2011-5225 affects the WordPress Sentinel plugin (v1.0.0). The vulnerability is an XSS in wordpress_sentinel.php that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Impact is reflected in the NVD entry with a base score of 4.3 (Medium); confidentiality rema...

CVE-2011-5231

CVE-2011-5231 is a duplicate of CVE-2012-0023. The connected data confirms VLC media player contains a double-free vulnerability in the TiVo demuxer get_chunk_header function (modules/demux/ty.c) affecting VLC 0.9.0–1.1.12, enabling potential remote code execution or crash via crafted TiVo files....

CVE-2011-5222

The CVE-2011-5222 entry concerns a SQL injection in rub2_w.php of PHP Flirt-Projekt 4.8 (and possibly earlier). The vulnerability is triggered via the rub parameter, allowing remote attackers to execute arbitrary SQL commands. The linked NVD entry lists a base score of 7.5 (HIGH) with network att...

CVE-2011-5224

CVE-2011-5224 describes an SQL injection vulnerability in the WordPress Sentinel plugin, version 1.0.0. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Sentinel plugin for WordPress (1.0.0). Root cause: unsafeguarded SQL handling in ...

CVE-2011-5235

The affected product is mnoGoSearch (

CVE-2011-5222

SQL injection vulnerability in rub2w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the rub parameter...

CVE-2011-5216

SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the active parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5228

Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...

CVE-2011-5213

CVE-2011-5213 affects BrowserCRM 5.100.01 and earlier and is tied to multiple SQL injection flaws. The OpenVAS entry confirms vulnerabilities in (1) index.php via login[username], (2) modules/Documents/version_list.php via parent_id, and (3) modules/Documents/index.php via contact_id, enabling re...

CVE-2011-5233

Summary: CVE-2011-5233 is a heap-based buffer overflow in IrfanView prior to 4.32, triggered by crafted TIFF images (Rows Per Strip and Samples Per Pixel). Affected software: IrfanView before 4.32. Impact per sources: remote code execution due to memory corruption in TIFF handling (as described)....

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5230

Seotoaster 1.9 and earlier is affected by SQL injection in the LoginModel::selectUserIdByLoginPass function. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the login parameter to sys/login/index or (2) the memberLoginName parameter to sys/login/member. Affect...

CVE-2011-5226

CVE-2011-5226: A CSRF flaw in wordpress_sentinel.php of the WordPress Sentinel plugin (version 1.0.0) allows remote attackers to hijack an administrator’s session by crafting requests that trigger snapshots. This affects the Sentinel plugin for WordPress; exploitation context and in-the-wild deta...