CVE-2011-4831

CVE-2011-4831 affects Web File Browser prior to 0.4b14. The webFileBrowser.php download action is vulnerable to a directory traversal via an encoded dot-dot (%2f) in the file parameter, allowing remote authenticated users to read arbitrary files. Reported impact from sources indicates partial con...

CVE-2011-4598

CVE-2011-4598 affects Asterisk Open Source 1.6.2.x (before 1.6.2.21) and 1.8.x (before 1.8.7.2). The handle_request_info function in channels/chan_sip.c can trigger a NULL pointer dereference and daemon crash when automon is enabled, via a crafted sequence of SIP requests, leading to a denial of ...

CVE-2011-4829

The CVE-2011-4829 issue is a SQL injection in Joomla! Barter Sites, affected via the com_listing component (version 1.3) where the category_id parameter to index.php enables arbitrary SQL execution. Affected product: Joomla! Barter Sites 1.3; vulnerable code path is within the com_listing/index.p...

CVE-2011-4823

CVE-2011-4823 describes multiple SQL injection vulnerabilities in the Joomla! extension Vik Real Estate (com_vikrealestate) version 1.0. The flaw allows remote attackers to execute arbitrary SQL commands by supplying crafted values for the contract parameter in the results action and the imm para...

CVE-2011-4516

CVE-2011-4516 affects JasPer, specifically the heap-based buffer overflow in the function jpc_cox_getcompparms (libjasper/jpc/jpc_cs.c) within JasPer 1.900.1. A crafted value in a COD (coding style default) marker segment of a JPEG2000 file can cause remote code execution or memory corruption, po...

CVE-2011-4597

CVE-2011-4597 affects Asterisk Open Source SIP over UDP implementations in 1.4.x up to 1.4.43, 1.6.x up to 1.6.2.21, and 1.8.x up to 1.8.7.2. The vulnerability arises from using different port numbers for responses to invalid requests based on whether a SIP username exists, enabling remote attack...

CVE-2011-4832

CVE-2011-4832 affects CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier. A directory traversal/local file inclusion occurs via the template parameter in a template action, allowing remote attackers to read arbitrary files on the server. OpenVAS entries describe this as...

CVE-2011-4836

The CVE-2011-4836 entry describes a Cross-Site Scripting (XSS) vulnerability in the web interface of HomeSeer HS2 version 2.5.0.20. The issue allows remote attackers to inject arbitrary web script or HTML through requests for crafted URIs directed at the HS2 web UI. Public references in the conne...

Microsoft Excel远程代码执行漏洞(MS11-096)

BUGTRAQ ID: 50954 CVE ID: CVE-2011-3403 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Excel在处理特制Excel文件的实现上存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 Microsoft Excel 2003 SP3 Microsoft Office 2004 for Mac 0 临时解决方法： 在Excel 2003中设置Office文件验证以禁止打开没有通过验证的文件。...

ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-346 December 13, 2011 - -- CVE ID: CVE-2011-3413 - -- CVSS: 7.5,...

Google Chrome Multiple Vulnerabilities - December11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11lin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Linux Authors: Rachana Shetty Copyright: Copyright c 20...

CVE-2011-4779

creationtimestamp| type| source ---|---|--- 2011-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18245...

Dolibarr < 3.1RC3 Multiple Vulnerabilities - Active Check

Dolibarr is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome Multiple Vulnerabilities - December11 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Windows Authors: Rachana Shetty Copyright: Copyright c...

Microsoft中文输入系统（Pinyin IME）本地权限提升漏洞(MS11-088)

BUGTRAQ ID: 50950 CVE ID: CVE-2011-2010 Microsoft Office IME CN是微软的中文输入系统。 Microsoft Office IME CN错误公开了不能在安全桌面上运行的配置选项，在实现上存在权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，成功利用后可完全控制受影响计算机 Microsoft Pinyin IME 2010 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-088）以及相应补丁: MS11-088：Vulnerability in Microso...

Microsoft Windows OLE属性远程代码执行漏洞(MS11-093)

BUGTRAQ ID: 50977 CVE ID: CVE-2011-3400 OLE即对象连接与嵌入技术。OLE不仅是桌面应用程序集成，而且还定义和实现了一种允许应用程序作为软件“对象彼此进行“连接”的机制。 Microsoft Windows处理特制OLE对象文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Windows XP Microsoft Server 2003 临时解决方法： 不打开可疑源或从可信源意外收到的office文件。 厂商补丁： Microsoft ---------...

Oracle Critical Patch Update - July 2011

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are cumulative but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should b...

Microsoft Publisher远程内存破坏漏洞(MS11-091)

BUGTRAQ ID: 50955 CVE ID: CVE-2011-3412 Microsoft Publisher是微软公司发行的桌面出版应用软件。 Microsoft Publisher处理特制.pub文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Publisher 2007 SP3 Microsoft Publisher 2007 SP2 Microsoft Publisher 2007 SP1 Microsoft Publisher 2003 SP3 Microsoft Publisher 2003 SP3 临时解决方法...

CVE-2011-4643

creationtimestamp| type| source ---|---|--- 2011-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18245...

CentOS 4 / 5 : pidgin (CESA-2011:1820)

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...