CVE-2011-4859

CVE-2011-4859 concerns the Schneider Electric Quantum Ethernet Module family, where hard-coded credentials exist for 16 accounts (AUTCSE, AUT_CSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212, noe77111_v500, ntpupdate, pcfactory, sysdiag, target, test, USER, webserver). This enables r...

CVE-2011-4860

The vulnerability CVE-2011-4860 affects the Schneider Electric Quantum Ethernet Module NOE 771 (aka Quantum 140NOE771*) where the ComputePassword function derives the fwupgrade password from the MAC address. This allows remote attackers to gain access via (1) ARP requests or (2) Neighbor Solicita...

CVE-2011-4603

The silcchannelmessage function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted message, a different vulnerability...

DEBIAN-CVE-2011-4602

The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in 1 voice-chat and 2 video-chat stanzas, which allows remote attackers to cause a denial of service application crash via a crafted message...

CVE-2011-4602

The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in 1 voice-chat and 2 video-chat stanzas, which allows remote attackers to cause a denial of service application crash via a crafted message...

CVE-2011-4602

CVE-2011-4602 affects the XMPP protocol plugin in libpurple/Pidgin. The vulnerability stems from improper handling of missing fields in voice-chat and video-chat stanzas, enabling a remote attacker to cause an application crash (denial of service) via a crafted message. Affected software isPidgin...

CVE-2011-3339

The CVE-2011-3339 entry describes an XSS vulnerability in the Admin Control Center of SafeNet Sentinel HASP/SRM, affecting HASP Run-time Environment 5.95 and earlier, with installers before 6.x and SDKs before 5.11. The issue arises from inadequate input validation in the web application, which c...

CVE-2011-4603

CVE-2011-4603 affects Pidgin (libpurple SILC protocol plugin). The silc_channel_message function in ops.c did not perform proper UTF-8 validation on incoming SILC messages, allowing a remote attacker to trigger a denial of service (application crash). Public advisories and patch histories show Op...

CVE-2011-4141

RSA SecurID Software Token for Windows (4.1 and earlier; affected 4.1.0.545 and earlier) is vulnerable to an insecure library loading/ DLL hijacking via an untrusted search path. The vulnerability allows local privilege escalation when a user opens a specially crafted Software Token file, enablin...

CVE-2011-5222

creationtimestamp| type| source ---|---|--- 2011-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36460...

Yahoo Babelfish Translator - Cross Site Scripting

Document Title: =============== Yahoo Babelfish Translator - Cross Site Scripting References: =========== Download: http://www.vulnerability-lab.com/resources/videos/350.wmv View: http://www.youtube.com/watch?v=u74PrIXydi4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=350 Release...

Unfixed XSS vulnerability at www.vashamashina.ru

Security researcher longrifle0x, has submitted on 17/12/2011 a cross-site-scripting XSS vulnerability affecting www.vashamashina.ru, which at the time of submission ranked 135154 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-4369

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers ...

CVE-2011-4369

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers ...

CVE-2011-4369

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers ...

CVE-2011-3834

Winamp

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-4857

CVE-2011-4857 describes a heap-based buffer overflow in Winamp’s in_mod.dll plugin (pre-5.623) triggered by crafted Impulse Tracker (IT) file data, enabling remote code execution. The issue is tied to parsing/handling in IT data and relates to the in_mod.dll component used by Winamp 5.x. Public d...

CVE-2011-4369

CVE-2011-4369 is described as an unspecified vulnerability in the Adobe PRC component affecting Adobe Reader/Acrobat 9.x (Windows, Mac OS X, UNIX) and 10.x up to 10.1.1, which could allow an attacker to execute arbitrary code or cause a memory-corruption-based denial of service. The initial entry...