CVE-2011-0291

The CVE-2011-0291 affects the BlackBerry PlayBook service on BlackBerry PlayBook tablets running software before 1.0.8.6067. A local attacker can escalate privileges by supplying a crafted configuration file inside a backup archive, exploiting the service’s handling of backup/configuration data. ...

Buffer overflow in resolver

Buffer overflow in resolver Severity: medium CVE-2011-4315 Not vulnerable: 1.1.8+, 1.0.10+ Vulnerable: 0.6.18-1.1.7...

Low: Red Hat Security Advisory: JBoss Enterprise Web Platform 5.1.2 update

Updated JBoss Enterprise Web Platform 5.1.2 packages that fix one security issue, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring...

CVE-2011-4714

Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files via a .. backslash dot dot in the URL...

CVE-2011-4713

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...

CVE-2011-4715

Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm...

CVE-2011-4712

Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...

CVE-2011-4707

Multiple cross-site scripting XSS vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the 1 instname parameter to the VsiTestScan servlet and 2 name parameter to the VsiTestServlet servlet...

Low: Red Hat Security Advisory: JBoss Enterprise Web Platform 5.1.2 update

Updated JBoss Enterprise Web Platform 5.1.2 packages that fix one security issue, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring...

Low: Red Hat Security Advisory: JBoss Enterprise Web Platform 5.1.2 update

Updated JBoss Enterprise Web Platform 5.1.2 packages that fix one security issue, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update

Updated JBoss Enterprise Application Platform 5.1.2 packages that fix two security issues, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update

Updated JBoss Enterprise Application Platform 5.1.2 packages that fix two security issues, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability...

CVE-2011-4712

Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...

CVE-2011-4715

CVE-2011-4715 affects Koha and LibLime Koha prior to updates: a directory traversal/ local file inclusion flaw in cgi-bin/koha/mainpage.pl related to the KohaOpacLanguage cookie can allow reading arbitrary files via the cookie to cgi-bin/opac/opac-main.pl (Output.pm). Affected versions: Koha 3.4 ...

CVE-2011-4708

CVE-2011-4708 affects IBM Rational Asset Manager prior to 7.5.1. It is a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Concrete affected product/version is stated; exploit details and root-cause mechanism...

CVE-2011-4713

CVE-2011-4713 affects osCSS2, versions up to 2.1.0 and earlier. The vulnerability is a directory traversal issue in catalog/content.php (and catalog/shopping_cart.php) where an attacker can supply a .. in the _ID parameter to read arbitrary files. This is due to insufficient input validation in t...

CVE-2011-2917

CVE-2011-2917 describes a SQL injection vulnerability in Mambo CMS

CVE-2011-4711

Namazu is affected by CVE-2011-4711: Namazu.cgi before 2.0.16 contains directory traversal flaws that allow remote attackers to read arbitrary files via .. in the lang or result parameters. Impact is read access; no exploit details are provided in the documents. Mitigation: upgrade to Namazu 2.0....

CVE-2011-4710

CVE-2011-4710 affects Pixie CMS versions 1.01 through 1.04, where the application is vulnerable to SQL injection via the pixie_user parameter and the Referer HTTP header in requests to the default URI. The underlying root cause is improper input handling that allows remote attackers to execute ar...

CVE-2011-4714

CVE-2011-4714 affects Virtual Vertex Muster Web Interface prior to 6.20. A directory traversal vulnerability allows remote attackers to read arbitrary files via a \... in the URL. The impact is described as a potential confidentiality exposure (read access to files) without details on exploit pat...