CVE-2011-4367

creationtimestamp| type| source ---|---|--- 2012-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36681 2025-08-17 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwmrsaddof2v...

Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1350-1)

Jesse Ruderman and Bob Clary discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user...

SuSE 10 Security Update : sysconfig (ZYPP Patch Number 7892)

The following bug has been fixed : - sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could have therefore lead to execution of shell code. CVE-2011-4182 %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2011-5078

CVE-2011-5078 affects Sybase M-Business Anywhere 6.7 before ESD#3 and 7.0 before ESD#7. The web administration interface does not require admin authentication for unspecified scripts, enabling remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

Important: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2011-5077

Unrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in image directory...

squirrelmail security update

1.4.8-5.0.1.el57.13 - Remove Redhat splash screen images 1.4.8-5.13 - fix typo in CVE-20210-4555 patch 1.4.8-5.12 - patch for CVE-2010-2813 was not complete 1.4.8-5.11 - fix: CVE-2010-1637 : Port-scans via non-standard POP3 server ports in Mail Fetch plugin - fix: CVE-2010-2813 : DoS disk space...

CVE-2011-5076

The CVE-2011-5076 entry describes an SQL injection in HDWiki’s model/comment.class.php for HDWiki 5.0/5.1 (and possibly other versions), exploitable via PATH_INFO to index.php, allowing remote execution of arbitrary SQL commands. Root cause: unsafe SQL construction in the affected file. Documents...

HP Data Protector Media Operations Server 'DBServer.exe' Remote Code Execution

According to its version, the installation of HP Data Protector Media Operations Server on the remote host allows an attacker to execute arbitrary code on the affected host with SYSTEM privileges due to a buffer overflow. Note that the vendor reports only Windows installs are affected. C Tenable...

CVE-2011-5077

Vulnerability : HDWiki 5.0 contains an unrestricted file upload in attachement.php that lets remote attackers execute arbitrary code by uploading a file with an executable extension and retrieving it from the image directory. Root cause : improper validation/handling of uploaded files enabling ar...

Stable Channel Update

The Chrome team is excited to announce the release of Chrome 17 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. 17.0.963.46 contains a number of new features including: New Extensions APIs Updated Omnibox Prerendering Download Scanning Protection Many other small changes Security...

Final Draft Script File Parsing Multiple Buffer Overflow Vulnerabilities

This host is installed with Final Draft and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbfinaldraftfileparsingmultbofvuln.nasl 5958 2017-04-17 09:02:19Z teissa $ Final Draft Script File Parsing Multiple Buffer Overflow Vulnerabilities Authors: Rachana...

Debian DSA-2405-1 : apache2 - multiple issues

Several vulnerabilities have been found in the Apache HTTPD Server : - CVE-2011-3607 : An integer overflow in appregsub could allow local attackers to execute arbitrary code at elevated privileges via crafted .htaccess files. - CVE-2011-3368 CVE-2011-3639 CVE-2011-4317 : The Apache HTTP Server di...

SuSE 11.1 Security Update : tomcat6 (SAT Patch Number 5759)

This update fixes a regression in parameter passing in urldecoding of parameters that contain spaces. In addition, multiple weaknesses in HTTP DIGESTS have been fixed CVE-2011-1184 : - The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33 and...

Mozilla Firefox 3.6.x < 3.6.26 Multiple Vulnerabilities

Binary data 6307.prm...

Mozilla Thunderbird 3.1.x Multiple Vulnerabilities

Binary data 801371.prm...

Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities

Binary data 6309.prm...

Design/Logic Flaw

The phpregistervariableex function in phpvariables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885...

CVE-2011-4041

The CVE-2011-4041 issue affects Advantech/BroadWin WebAccess WebAccess Network Service (RPC on TCP 4592). A long string in an RPC request can lead to remote code execution or the disclosure of the security-code value. Public exploit code has been posted; the vulnerability applies to all WebAccess...