CVE-2011-4606

Artsoft Entertainment Rocks'n'Diamonds aka rocksndiamonds 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory...

Design/Logic Flaw

Artsoft Entertainment Rocks'n'Diamonds aka rocksndiamonds 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory...

UBUNTU-CVE-2011-4606

Artsoft Entertainment Rocks'n'Diamonds aka rocksndiamonds 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory...

PT-2011-5120 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 3.1.0 RC and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved by manipulating the PATH INFO to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 viewname parameter in a CalendarAjax action, 2 activitymode parameter in a DetailView action, 3 contactid and 4 parentid parameters in an...

CVE-2011-4670

Multiple cross-site scripting XSS vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 viewname parameter in a CalendarAjax action, 2 activitymode parameter in a DetailView action, 3 contactid and 4 parentid parameters in an...

GLSA-201111-07 : TinTin++: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201111-07 TinTin++: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TinTin++. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to execu...

Launching Wireless Hacking Series for Fun and Profit

Launching Wireless Hacking Series for Fun and Profit THN is launching a Wireless Hacking series of blog posts where we will talk about a lot of tools and techniques. We hope this will be fun and informational for all of our readers. The series will be based on the SecurityTube Wireless Security...

CVE-2011-3431

The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen...

Design/Logic Flaw

The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen...

CVE-2011-3431

The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen...

CVE-2010-4912

SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action...

Sql injection

SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action...

CVE-2010-4912

CVE-2010-4912 affects UCenter Home 2.0. The vulnerability is a SQL injection in the shop.php file, exploitable via the shopid parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low ...

CVE-2010-4912

SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action...

Fedora 16 : zabbix-1.8.7-2.fc16 (2011-12457)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

Fedora 15 : zabbix-1.8.7-2.fc15 (2011-12485)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

BitDefender IS2011 - FV Buffer Overflow Vulnerability

Document Title: =============== BitDefender IS2011 - FV Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=147 Release Date: ============= 2011-08-29 Vulnerability Laboratory ID VL-ID: ==================================== 147...

CentOS Update for samba CESA-2009:1529 centos4 i386

Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2009:1529 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Code injection

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension...