|
299351
|
- |
|
squirrelmail
|
squirrelmail
|
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n (newline) character, a different vulnerability than CVE-2010-4555.
|
CWE-94
Code Injection
|
CVE-2011-2752
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299352
|
- |
|
parodia
|
parodia
|
SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2011-2751
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299353
|
- |
|
novell
|
file_reporter
|
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
|
CWE-399
Resource Management Errors
|
CVE-2011-2750
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299354
|
8.8 |
HIGH
Network
|
libpng fedoraproject debian canonical
|
libpng fedora debian_linux ubuntu_linux
|
The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows re…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-2692
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299355
|
6.5 |
MEDIUM
Network
|
libpng fedoraproject debian
|
libpng fedora debian_linux
|
The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an emp…
|
CWE-476
NULL Pointer Dereference
|
CVE-2011-2691
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299356
|
8.8 |
HIGH
Network
|
libpng fedoraproject debian canonical
|
libpng fedora debian_linux ubuntu_linux
|
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set…
|
CWE-120
Classic Buffer Overflow
|
CVE-2011-2690
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299357
|
6.5 |
MEDIUM
Network
|
libpng fedoraproject debian canonical
|
libpng fedora debian_linux ubuntu_linux
|
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (appli…
|
CWE-125
Out-of-bounds Read
|
CVE-2011-2501
|
2024-11-21 10:28 |
2011-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299358
|
- |
|
apache
|
tomcat
|
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allow…
|
CWE-20
Improper Input Validation
|
CVE-2011-2526
|
2024-11-21 10:28 |
2011-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299359
|
- |
|
dokuwiki
|
dokuwiki
|
Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link.
|
CWE-79
Cross-site Scripting
|
CVE-2011-2510
|
2024-11-21 10:28 |
2011-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299360
|
- |
|
phpmyadmin
|
phpmyadmin
|
Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote aut…
|
CWE-22
Path Traversal
|
CVE-2011-2508
|
2024-11-21 10:28 |
2011-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|