CVE-2011-4606

Artsoft Entertainment Rocks'n'Diamonds aka rocksndiamonds 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory...

CVE-2011-4339

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

CVE-2011-4835

CVE-2011-4835 is a directory traversal vulnerability in the HomeSeer HS2 Web Interface (version 2.5.0.20 or earlier) that allows remote attackers to access arbitrary files via unspecified vectors. The NVD entry describes a web interface directory traversal with a CVSSv2 base score of 7.5 (High) a...

CVE-2011-4825

CVE-2011-4825 describes a static code injection vulnerability in the file inc/function.base.php of the Ajax File and Image Manager (used in various products). The flaw allows remote attackers to inject arbitrary PHP code into the file data.php via crafted parameters. Affected versions include Aja...

CVE-2011-4828

CVE-2011-4828 affects AutoSec Tools V-CMS 1.0, specifically the inline_image_upload.php file upload feature. An unrestricted file upload allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file in tem...

CVE-2011-4339

OpenIPMI’s ipmievd daemon (as used by ipmitool 1.8.11 on RHEL6, Debian, Fedora 16 and other products) creates a world-writable ipmievd.pid (0666), enabling a local user to kill arbitrary processes. CVE-2011-4339 is cited across multiple advisories (e.g., MiracleLinux AXSA entries, Oracle Linux RH...

CVE-2011-4827

CVE-2011-4827 involves multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0. The issues occur in a) redirect.php via the p parameter and b) includes/TrueColorPicker/index.php via the box parameter, caused by improper handling in includes/TrueColorPicker/class.TrueColorPi...

CVE-2011-4833

Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the 1 where and 2 order parameters in a getfulllist action to index.php...

CVE-2011-4517

CVE-2011-4517 affects JasPer 1.900.1 used for JPEG-2000 decoding. The flaw is in libjasper/jpc/jpc_cs.c: jpc_crg_getparms uses an incorrect data type during a size calculation, enabling remote attackers to trigger a heap-based buffer overflow via a crafted CRG marker segment in a JPEG2000 file. C...

CVE-2011-4837

CVE-2011-4837 describes a Cross-site request forgery (CSRF) in the HomeSeer HS2 web interface (/ctrl) that allows an attacker to hijack admin authentication and perform actions, including executing arbitrary programs, on HS2 2.5.0.20. The available sources confirm the vulnerability and affected v...

CVE-2011-4822

CVE-2011-4822 involves multiple cross-site scripting (XSS) vulnerabilities in the Atlassian FishEye user profile feature prior to version 2.5.5. The issue allows remote attackers to inject arbitrary web script or HTML via two vectors: (1) snippets in a user comment that are not properly sanitized...

CVE-2011-4830

The CVE-2011-4830 issue covers Joomla! Barter Sites component “com_listing” (1.3) with multiple XSS vulnerabilities affecting parameters listed in index.php (listing_title, description, homeurl, paystring, sell_price, shipping_cost, quantity). Connected OpenVAS entries also indicate an SQL Inject...

CVE-2011-4834

The CVE-2011-4834 issue affects HP Application Lifecycle Management (ALM) 11 on AIX, HP-UX, and Solaris, specifically the GetInstalledPackages function in the configuration tool. It enables local privilege escalation via two attack vectors: (1) a Trojan horse placed in /tmp/tmp.txt as a FIFO, and...

CVE-2011-4826

CVE-2011-4826 affects AutoSec Tools V-CMS 1.0. The vulnerability is an SQL injection in session.php exploitable via the user parameter to process.php, enabling remote attackers to execute arbitrary SQL commands. Multiple connected sources corroborate this flaw (including Red Hat, NVD, and OpenVAS...

CVE-2011-4824

SQL injection vulnerability in authlogin.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the loginusername parameter...

CVE-2011-4606

CVE-2011-4606 affects rocksndiamonds 3.3.0.1, enabling local users to overwrite files via a symlink attack on ~/.rocksndiamonds/cache/artworkinfo.cache in a user’s home. The issue is mitigated by updated packages, e.g., rocksndiamonds 3.3.1.2-2.5 (openSUSE), with Fedora updates 2012-1567/1553 add...

CVE-2011-4824

CVE-2011-4824 affects Cacti prior to 0.8.7h; SQL injection in auth_login.php via login_username allows remote attackers to execute arbitrary SQL. Impact per NVD: CVSS v2 base 7.5 (Network, None auth, Partial confidentiality/integrity/availability). Mitigation: upgrade to 0.8.7h or later where pat...

CVE-2011-4832

CVE-2011-4832 affects CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier. A directory traversal/local file inclusion occurs via the template parameter in a template action, allowing remote attackers to read arbitrary files on the server. OpenVAS entries describe this as...

CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

CVE-2011-4830

Multiple cross-site scripting XSS vulnerabilities in the comlisting component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the 1 listingtitle, 2 description, 3 homeurl aka Website Address, 4 paystring aka Payment types...