20529 matches found
CVE-2011-2741
CVE-2011-2741 affects EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch1, and SP3. The issue concerns Device Recovery and Device Identification, where certain data elements from end-user devices may allow bypassing security restrictions for both previously non...
CVE-2011-4368
CVE-2011-4368 concerns an XSS flaw in Adobe ColdFusion’s Remote Development Services (RDS) affecting ColdFusion 8.0–9.0.1. The vulnerability enables remote attackers to inject arbitrary script/HTML in victims’ browsers, via unspecified vectors, within the context of the affected web application. ...
CVE-2011-4808
SQL injection vulnerability in the HM Community comhmcommunity component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fndhome action to index.php...
CVE-2011-4809
Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...
CVE-2011-4805
Cross-site scripting XSS vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter...
CVE-2011-4807
Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the var1 parameter...
CVE-2011-3408
Csrsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...
CVE-2011-3401
ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."...
Immunity Canvas: MS11_098
Name| ms11098 ---|--- CVE| CVE-2011-2018 Exploit Pack| CANVAS Description| MS11-098 Notes| CVE Name: CVE-2011-2018 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-098 Reliably exploits Windows XP to 7 32-bit only. When executed, this will get a callback that run...
icu, libicu security update
CentOS Errata and Security Advisory CESA-2011:1815 Updated icu packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...
CVE-2011-4810
CVE-2011-4810 describes multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x. The issue allows remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php, (2) downloads.php, and via the report parameter to admin/reports.php. ...
CVE-2011-3403
CVE-2011-3403 affects Microsoft Excel 2003 SP3 and Office 2004 for Mac, where improper handling of in-memory objects during parsing of crafted Excel files enables remote code execution. The vulnerability, dubbed “Record Memory Corruption Vulnerability,” is rated CVSSv2 base 9.3 (Network, single a...
Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)
This host is missing an important security update according to Microsoft Bulletin MS11-097. OpenVAS Vulnerability Test $Id: secpodms11-097.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2620712 Authors: Rachana Shetty Copyright:...
Google Chrome < 16.0.912.63 Multiple Vulnerabilities
Binary data 6108.pasl...
CVE-2011-4805
SAP Crystal Reports Server 2008 is affected by a Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp, allowing remote attackers to inject arbitrary web script or HTML via the service parameter. The issue is described for SAP Crystal Reports Server 2008; no further technical details (affect...
CVE-2011-4807
CVE-2011-4807: A directory traversal flaw in phpAlbum 0.4.1.16 and earlier affects main.php, allowing remote attackers to read arbitrary files via .. in the var1 parameter. This is supported by multiple sources (NVD/Red Hat/CVE List) and an exploit-db entry exists. Affected software: phpAlbum (sp...
Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2567053)
This host is missing a critical security update according to Microsoft Bulletin MS11-087. OpenVAS Vulnerability Test $Id: secpodms11-087.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerability 2639417 Authors: Madhuri D Copyright: Copyright c 2011...
CVE-2011-1508
CVE-2011-1508 affects Microsoft Publisher 2003 SP3 and Microsoft Publisher 2007 SP2/SP3. Root cause: PubConv.dll mishandles memory for function pointers during parsing of Publisher files, enabling a remote attacker to execute arbitrary code via a crafted Publisher file. The issue is tied to MS11-...
CVE-2011-4804
CVE-2011-4804 describes a directory traversal (local file inclusion) vulnerability in Joomla! component obSuggest (com_obsuggest) prior to version 1.8. An attacker can use a .. in the controller parameter to index.php to read arbitrary local files. The issue affects the Joomla! obSuggest componen...
