|
302781
|
- |
|
linux redhat canonical
|
linux_kernel enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_eus ubuntu_linux
|
Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending a…
|
CWE-362
Race Condition
|
CVE-2011-0695
|
2024-11-21 10:24 |
2011-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302782
|
- |
|
e107
|
e107
|
Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2011-0457
|
2024-11-21 10:24 |
2011-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302783
|
- |
|
wordpress
|
wordpress
|
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.
|
CWE-200
Information Exposure
|
CVE-2011-0701
|
2024-11-21 10:24 |
2011-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302784
|
- |
|
wordpress
|
wordpress
|
Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the Quick/Bulk Edit ti…
|
CWE-79
Cross-site Scripting
|
CVE-2011-0700
|
2024-11-21 10:24 |
2011-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302785
|
- |
|
apache
|
subversion
|
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) …
|
NVD-CWE-Other
|
CVE-2011-0715
|
2024-11-21 10:24 |
2011-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302786
|
- |
|
otrs
|
otrs
|
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
|
CWE-78
OS Command
|
CVE-2011-0456
|
2024-11-21 10:24 |
2011-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302787
|
- |
|
novell
|
vibe_onprem
|
Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2011-0464
|
2024-11-21 10:24 |
2011-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302788
|
- |
|
wireshark
|
wireshark
|
Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have u…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-0713
|
2024-11-21 10:24 |
2011-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302789
|
- |
|
thingslabo
|
things_bbs bbs_thread
|
Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2011-0455
|
2024-11-21 10:24 |
2011-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302790
|
- |
|
vsftpd_project canonical fedoraproject debian suse opensuse
|
vsftpd ubuntu_linux fedora debian_linux linux_enterprise_server opensuse
|
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob ex…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2011-0762
|
2024-11-21 10:24 |
2011-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|