|
296361
|
- |
|
dell
|
kace_k2000_systems_deployment_appliance
|
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTM…
|
CWE-79
Cross-site Scripting
|
CVE-2011-4436
|
2024-11-21 10:32 |
2011-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296362
|
- |
|
ibm
|
db2_tools_for_z\/os
|
The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4435
|
2024-11-21 10:32 |
2011-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296363
|
- |
|
microsoft
|
windows_server_2008 windows_7
|
Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4434
|
2024-11-21 10:32 |
2011-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296364
|
- |
|
merethis
|
centreon
|
www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent at…
|
CWE-310
Cryptographic Issues
|
CVE-2011-4432
|
2024-11-21 10:32 |
2011-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296365
|
- |
|
merethis
|
centreon
|
Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
|
CWE-22
Path Traversal
|
CVE-2011-4431
|
2024-11-21 10:32 |
2011-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296366
|
- |
|
apache
|
http_server
|
The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of envi…
|
CWE-20
Improper Input Validation
|
CVE-2011-4415
|
2024-11-21 10:32 |
2011-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296367
|
- |
|
courseforum
|
projectforum
|
Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on …
|
CWE-79
Cross-site Scripting
|
CVE-2011-4277
|
2024-11-21 10:32 |
2011-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296368
|
- |
|
ark-web
|
a-form_pc a-form_pc_mobile
|
Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a …
|
CWE-79
Cross-site Scripting
|
CVE-2011-4274
|
2024-11-21 10:32 |
2011-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296369
|
- |
|
goahead
|
goahead_webserver
|
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to …
|
CWE-79
Cross-site Scripting
|
CVE-2011-4273
|
2024-11-21 10:32 |
2011-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296370
|
- |
|
investintech
|
absolute_pdf_server
|
Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF documen…
|
NVD-CWE-noinfo
|
CVE-2011-4223
|
2024-11-21 10:32 |
2011-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|