|
293471
|
8.8 |
HIGH
Network
|
user_access_manager_project
|
user_access_manager
|
The user-access-manager plugin before 1.2 for WordPress has CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2011-5328
|
2024-11-21 10:34 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293472
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at least memory corruption.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-5327
|
2024-11-21 10:34 |
2019-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293473
|
5.5 |
MEDIUM
Local
|
crowbar_project
|
crowbar
|
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
|
CWE-200
Information Exposure
|
CVE-2012-0433
|
2024-11-21 10:34 |
2018-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293474
|
6.2 |
MEDIUM
Local
|
gnu
|
glibc
|
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-5320
|
2024-11-21 10:34 |
2017-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293475
|
7.5 |
HIGH
Network
|
busybox debian canonical
|
busybox debian_linux ubuntu_linux
|
Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.
|
CWE-22
Path Traversal
|
CVE-2011-5325
|
2024-11-21 10:34 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293476
|
7.5 |
HIGH
Network
|
debian enlightenment
|
debian_linux imlib2
|
imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse.
|
CWE-189
Numeric Errors
|
CVE-2011-5326
|
2024-11-21 10:34 |
2016-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293477
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and …
|
NVD-CWE-Other
|
CVE-2011-5321
|
2024-11-21 10:34 |
2016-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293478
|
- |
|
gehealthcare
|
centricity_pacs-iw
|
The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) shared for the shared user and (2) scan for the scan user, which…
|
CWE-255
Credentials Management
|
CVE-2011-5324
|
2024-11-21 10:34 |
2015-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293479
|
- |
|
gehealthcare
|
centricity_pacs-iw
|
GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified impact and attack vectors. NOTE: it is no…
|
CWE-255
Credentials Management
|
CVE-2011-5323
|
2024-11-21 10:34 |
2015-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293480
|
- |
|
gehealthcare
|
centricity_analytics_server
|
GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the vie…
|
CWE-255
Credentials Management
|
CVE-2011-5322
|
2024-11-21 10:34 |
2015-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|