|
295691
|
- |
|
gnu
|
gdb
|
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafte…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4355
|
2024-11-21 10:32 |
2013-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295692
|
- |
|
redhat
|
jboss_enterprise_web_platform
jboss_enterprise_application_platform
jboss_enterprise_brms_platform
|
Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform …
|
CWE-20
Improper Input Validation
|
CVE-2011-4575
|
2024-11-21 10:32 |
2013-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295693
|
- |
|
simplerealtytheme
|
advanced_text_widget_plugin
|
Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page para…
|
CWE-79
Cross-site Scripting
|
CVE-2011-4618
|
2024-11-21 10:32 |
2013-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295694
|
- |
|
redhat
|
enterprise_virtualization_manager
|
Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a vi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4316
|
2024-11-21 10:32 |
2013-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295695
|
- |
|
redhat
|
jboss_enterprise_application_platform
jboss_enterprise_web_platform
jboss_enterprise_portal_platform
jboss_enterprise_brms_platform
jboss_enterprise_soa_platform
|
The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.C…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4605
|
2024-11-21 10:32 |
2012-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295696
|
- |
|
xiph
|
icecast
|
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
|
CWE-20
Improper Input Validation
|
CVE-2011-4612
|
2024-11-21 10:32 |
2012-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295697
|
- |
|
backwpup
|
backwpup
|
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.
|
CWE-94
Code Injection
|
CVE-2011-4342
|
2024-11-21 10:32 |
2012-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295698
|
- |
|
spamtitan
|
webtitan
|
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the fname parameter in a view action.
|
CWE-22
Path Traversal
|
CVE-2011-4640
|
2024-11-21 10:32 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295699
|
- |
|
spamtitan
|
webtitan
|
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, …
|
CWE-94
Code Injection
|
CVE-2011-4639
|
2024-11-21 10:32 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295700
|
- |
|
spamtitan
|
webtitan
|
Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login-x.php, and allow remote authe…
|
CWE-89
SQL Injection
|
CVE-2011-4638
|
2024-11-21 10:32 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
