|
297831
|
- |
|
vasthtml
|
forum_server
|
Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max p…
|
CWE-89
SQL Injection
|
CVE-2011-1047
|
2024-11-21 10:25 |
2011-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297832
|
- |
|
ibm
|
filenet_p8_content_engine
filenet_p8_business_process_manager
filenet_p8_content_manager
|
IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access ro…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-1046
|
2024-11-21 10:25 |
2011-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297833
|
- |
|
ibm
|
filenet_p8_rendition_engine
filenet_p8_content_manager
|
Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attackers to gain privileges via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2011-1045
|
2024-11-21 10:25 |
2011-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297834
|
- |
|
pivotx
|
pivotx
|
The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.
|
CWE-255
Credentials Management
|
CVE-2011-1035
|
2024-11-21 10:25 |
2011-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297835
|
- |
|
freedesktop
|
telepathy_gabble
|
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that s…
|
CWE-20
Improper Input Validation
|
CVE-2011-1000
|
2024-11-21 10:25 |
2011-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297836
|
- |
|
linux
redhat
|
linux_kernel
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_eus
|
The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially …
|
CWE-909
Missing Initialization of Resource
|
CVE-2011-1044
|
2024-11-21 10:25 |
2011-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297837
|
- |
|
google
|
chrome_os
|
Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the nam…
|
CWE-399
Resource Management Errors
|
CVE-2011-1042
|
2024-11-21 10:25 |
2011-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297838
|
- |
|
ibm
|
rational_build_forge
|
Cross-site scripting (XSS) vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. …
|
CWE-79
Cross-site Scripting
|
CVE-2011-1034
|
2024-11-21 10:25 |
2011-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297839
|
- |
|
ibm
|
informix_dynamic_server
|
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment op…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-1033
|
2024-11-21 10:25 |
2011-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297840
|
- |
|
ibm
|
lotus_connections
|
IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-1032
|
2024-11-21 10:25 |
2011-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
