|
296911
|
- |
|
ibm
|
tivoli_directory_server
|
IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remo…
|
CWE-287
Improper Authentication
|
CVE-2011-2758
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296912
|
- |
|
manageengine
|
servicedesk_plus
|
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME paramete…
|
CWE-22
Path Traversal
|
CVE-2011-2757
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296913
|
- |
|
manageengine
|
servicedesk_plus
|
FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.
|
CWE-287
Improper Authentication
|
CVE-2011-2756
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296914
|
- |
|
manageengine
|
servicedesk_plus
|
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors.
|
CWE-22
Path Traversal
|
CVE-2011-2755
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296915
|
- |
|
ibm
|
websphere_portal web_content_manager
|
Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, al…
|
CWE-79
Cross-site Scripting
|
CVE-2011-2754
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296916
|
- |
|
squirrelmail
|
squirrelmail
|
Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the …
|
CWE-352
Origin Validation Error
|
CVE-2011-2753
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296917
|
- |
|
squirrelmail
|
squirrelmail
|
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n (newline) character, a different vulnerability than CVE-2010-4555.
|
CWE-94
Code Injection
|
CVE-2011-2752
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296918
|
- |
|
parodia
|
parodia
|
SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2011-2751
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296919
|
- |
|
novell
|
file_reporter
|
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
|
CWE-399
Resource Management Errors
|
CVE-2011-2750
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296920
|
8.8 |
HIGH
Network
|
libpng fedoraproject debian canonical
|
libpng fedora debian_linux ubuntu_linux
|
The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows re…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-2692
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|