|
295241
|
7.5 |
HIGH
Network
|
prophecyinternational
|
snare
|
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2011-5247
|
2024-11-21 10:33 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295242
|
6.1 |
MEDIUM
Network
|
koala-framework
|
koala_framework
|
Koala Framework before 2011-11-21 has XSS via the request_uri parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2011-5018
|
2024-11-21 10:33 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295243
|
6.1 |
MEDIUM
Network
|
zope
|
zope
|
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote at…
|
CWE-79
Cross-site Scripting
|
CVE-2011-4924
|
2024-11-21 10:33 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295244
|
4.8 |
MEDIUM
Network
|
f5 debian
|
nginx debian_linux
|
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
|
CWE-20
Improper Input Validation
|
CVE-2011-4968
|
2024-11-21 10:33 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295245
|
7.5 |
HIGH
Network
|
openpegasus redhat
|
tog-pegasus enterprise_linux
|
tog-Pegasus has a package hash collision DoS vulnerability
|
CWE-20
Improper Input Validation
|
CVE-2011-4967
|
2024-11-21 10:33 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295246
|
7.8 |
HIGH
Local
|
cobblerd
|
cobbler
|
cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE
|
CWE-269
Improper Privilege Management
|
CVE-2011-4954
|
2024-11-21 10:33 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295247
|
8.8 |
HIGH
Network
|
cobblerd
|
cobbler
|
cobbler: Web interface lacks CSRF protection when using Django framework
|
CWE-352
Origin Validation Error
|
CVE-2011-4952
|
2024-11-21 10:33 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295248
|
7.5 |
HIGH
Network
|
mpack_project
|
mpack
|
mpack 1.6 has information disclosure via eavesdropping on mails sent by other users
|
CWE-200
Information Exposure
|
CVE-2011-4919
|
2024-11-21 10:33 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295249
|
7.5 |
HIGH
Network
|
ckeditor
|
ckeditor
|
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request.
|
CWE-200
Information Exposure
|
CVE-2011-4972
|
2024-11-21 10:33 |
2019-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295250
|
6.5 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
|
CWE-20
Improper Input Validation
|
CVE-2011-4904
|
2024-11-21 10:33 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|