CVE-2011-4800

CVE-2011-4800 affects Serv-U FTP Server up to 11.1.0.4. It is a directory-traversal flaw where a back-to-front path use ("..:/") in LIST, PUT, or GET commands enables remote authenticated users to read/write arbitrary files and list/create directories. Public exploits have been noted; CVSS ~9.0 (...

CVE-2011-2010

The CVE-2011-2010 issue affects the Microsoft Office IME (Chinese) for Simplified Chinese in Pinyin IME 2010 family (MSPY), including Office Pinyin SimpleFast Style 2010 and Office Pinyin New Experience Style 2010. The root cause is improper restriction of configuration options in the IME toolbar...

CVE-2011-3410

Summary: CVE-2011-3410 describes an out-of-bounds/indexing vulnerability in Microsoft Publisher components of Office (notably Publisher 2003 SP3 and Publisher 2007 SP2/SP3) that could allow remote code execution when a user opens a specially crafted Publisher file. Root cause: Improper handling o...

CVE-2011-5213

creationtimestamp| type| source ---|---|--- 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36449 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36448...

CVE-2011-5214

creationtimestamp| type| source ---|---|--- 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36450 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36454 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36451 2011-12-14...

Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)

This host is missing a critical security update according to Microsoft Bulletin MS11-090. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-4801

The CVE-2011-4801 issue affects Authenex ASAS Server 3.1.0.2 and 3.1.0.3, where an SQL injection in akeyActivationLogin.do via the username parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is evidenced in multiple sources (NVD, Red Hat advisory, OpenVAS entri...

virt-v2v security and bug fix update

0.8.3-5 - Fix regression when converting Win7 32 bit to RHEV RHBZ738236 0.8.3-4 element 0.8.3-3 - Add missing dependency on new Sys::Virt 0.8.3-2 - Fix for CVE-2011-1773 - Document limitations wrt Windows Recovery Console 0.8.3-1 - Include missing virt-v2v.db - Rebase to upstream release 0.8.3...

CVE-2011-4809

The CVE-2011-4809 entry concerns the HM Community (com_hmcommunity) component for Joomla! prior to version 1.01. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via profile save task parameters in index.php. Affec...

squid security update

-7:3.1.10-1.el62.1 - Resolves: 755016 - CVE-2011-4096: Invalid free by processing CNAME DNS record...

CVE-2011-4801

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System ASAS Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Unfixed Redirect vulnerability at www.designourpepsican.com

Security researcher p0pc0rn, has submitted on 14/12/2011 a Redirect vulnerability affecting www.designourpepsican.com, which at the time of submission ranked 10839900 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

CVE-2011-4803

Affected software: WordPress WPtouch plugin. Vulnerable component: wptouch/ajax.php; issue: SQL injection via the id parameter that allows remote execution of arbitrary SQL commands. Root cause: improper validation/escaping in the Ajax endpoint. Impact: potential data modification, query manipula...

CVE-2011-4806

Affected product: phpAlbum (version 0.4.1.16 and earlier). Vulnerability: Multiple cross-site scripting (XSS) flaws in main.php allow remote injection of arbitrary web script or HTML via (1) var1 and (2) keyword parameters. Root cause: insufficient input sanitization in main.php. Impact: As descr...

CVE-2011-2018

CVE-2011-2018 affects multiple Windows OS kernels (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP0/SP1). Root cause: the Windows kernel fails to initialize objects properly, enabling a local attacker to gain SYSTEM privileges via a crafted application (Windows Kernel Except...

util-linux-ng security, bug fix, and enhancement update

2.17.2-12.4 - fix CVE-2011-1675 - mount fails to anticipate RLIMITFSIZE - fix CVE-2011-1677 - umount may fail to remove /etc/mtab lock file 2.17.2-12.3 - fix fatal typos in patch for 723546 2.17.2-12.2 - rename /etc/hushlogin to /etc/hushlogins 696731 2.17.2-12.1 - fix 723546 - Defects revealed b...

CVE-2011-3401

This CVE affects Microsoft Windows Media Player and Windows Media Center (XP SP2/SP3, Vista SP2, Windows 7 SP1). The root cause is memory corruption when parsing specially crafted DVR-MS files, allowing remote code execution with the caller’s privileges. Affected components include ENCDEC.DLL use...

CVE-2011-4802

Dolibarr

CVE-2011-4814

Dolibarr

CVE-2011-4808

The vulnerability described for CVE-2011-4808 affects the Joomla!HM Community (com_hmcommunity) component prior to version 1.01. The issue is an SQL injection in the fnd_home action of index.php, exploitable via the id parameter, allowing remote attackers to execute arbitrary SQL commands. All co...