|
296771
|
6.1 |
MEDIUM
Network
|
snewscms
|
snews
|
A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.
|
CWE-79
Cross-site Scripting
|
CVE-2011-2706
|
2024-11-21 10:28 |
2020-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296772
|
6.1 |
MEDIUM
Network
|
mozilla
|
firefox
|
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets
|
CWE-79
Cross-site Scripting
|
CVE-2011-2670
|
2024-11-21 10:28 |
2020-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296773
|
9.8 |
CRITICAL
Network
|
linux redhat
|
dhcp6c enterprise_linux
|
The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP messag…
|
CWE-74
Injection
|
CVE-2011-2717
|
2024-11-21 10:28 |
2019-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296774
|
9.8 |
CRITICAL
Network
|
vsftpd_project debian
|
vsftpd debian_linux
|
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
|
CWE-78
OS Command
|
CVE-2011-2523
|
2024-11-21 10:28 |
2019-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296775
|
5.3 |
MEDIUM
Local
|
packagekit_project debian redhat
|
packagekit debian_linux enterprise_linux_server
|
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2011-2515
|
2024-11-21 10:28 |
2019-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296776
|
7.5 |
HIGH
Network
|
freebsd netbsd
|
freebsd netbsd
|
Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl all…
|
CWE-200
Information Exposure
|
CVE-2011-2480
|
2024-11-21 10:28 |
2019-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296777
|
7.5 |
HIGH
Network
|
drupal debian redhat fedoraproject
|
drupal debian_linux enterprise_linux fedora
|
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individua…
|
CWE-863
Incorrect Authorization
|
CVE-2011-2726
|
2024-11-21 10:28 |
2019-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296778
|
6.5 |
MEDIUM
Network
|
google
|
blink
|
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.
|
CWE-416
Use After Free
|
CVE-2011-2334
|
2024-11-21 10:28 |
2019-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296779
|
7.5 |
HIGH
Network
|
google
|
blink
|
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.
|
CWE-415
Double Free
|
CVE-2011-2335
|
2024-11-21 10:28 |
2019-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296780
|
9.8 |
CRITICAL
Network
|
google
|
blink
|
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
|
CWE-704
Incorrect Type Conversion or Cast
|
CVE-2011-2337
|
2024-11-21 10:28 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|