CVE-2011-1027Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a strin…
5.0 MOYENNE
CVE-2011-1025bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access r…
6.8 MOYENNE
CVE-2011-1024chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is …
4.6 MOYENNE
CVE-2011-0708exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via …
4.3 MOYENNE
CVE-2011-0421The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-…
4.3 MOYENNE
CVE-2011-0284Les serveurs KDC MIT Kerberos 5 avec PKINIT activé sont affectés par une faille de gestion de la mémoire. Un attaquant distant non authentifié peut envoyer une requête spécialement…
7.6 ÉLEVÉE
CVE-2011-1433The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, whi…
5.0 MOYENNE
CVE-2010-4768Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in…
6.0 MOYENNE
CVE-2010-4767Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an in…
5.0 MOYENNE
CVE-2010-4766The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to …
4.3 MOYENNE
CVE-2010-4765Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log da…
4.9 MOYENNE
CVE-2010-4764Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys…
5.0 MOYENNE
CVE-2010-4763The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote a…
6.5 MOYENNE
CVE-2010-4762Cross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request System (OTRS) before 3.0.0-beta2 allows remote authenticated users to inject arbit…
3.5 FAIBLE
CVE-2010-4761The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticat…
4.0 MOYENNE
CVE-2010-4760Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticat…
3.5 FAIBLE
CVE-2010-4759Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to ca…
4.0 MOYENNE
CVE-2010-4758installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, whic…
1.9 FAIBLE
CVE-2009-5057The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remo…
5.0 MOYENNE
CVE-2009-5056Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a queue, which allows remote authenticated users to bypass inten…
2.1 FAIBLE
CVE-2009-5055Open Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypa…
3.5 FAIBLE
CVE-2008-7283Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-int…
6.0 MOYENNE
CVE-2008-7282Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options …
4.6 MOYENNE
CVE-2008-7281Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain poten…
4.3 MOYENNE
CVE-2008-7280Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, …
5.0 MOYENNE
CVE-2008-7279The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arb…
6.5 MOYENNE
CVE-2008-7278The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which…
5.0 MOYENNE
CVE-2008-7277Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might…
6.5 MOYENNE
CVE-2008-7276Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intend…
4.6 MOYENNE
CVE-2008-7275Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote attackers to inject arbitrary web script or HTML via vectors rela…
4.3 MOYENNE
CVE-2011-1148Les versions 5.3.6 et antérieures de PHP sont affectées par une faille de corruption de mémoire lors du traitement de certaines fonctions de chaîne de caractères. Un attaquant non …
7.5 ÉLEVÉE
CVE-2011-1432The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessio…
6.8 MOYENNE
CVE-2011-1431The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middl…
6.8 MOYENNE
CVE-2011-1430The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands …
6.8 MOYENNE
CVE-2011-1429Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP se…
5.8 MOYENNE
CVE-2011-1428Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, …
5.8 MOYENNE
CVE-2011-1153Les versions 5.3.5 et antérieures de PHP sont affectées via l'extension phar. Un attaquant distant non authentifié peut envoyer des données spécialement conçues au serveur pour pro…
7.5 ÉLEVÉE
CVE-2011-1094kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which…
4.3 MOYENNE
CVE-2011-0889HP Client Automation Enterprise (versions 5.11 à 7.9) est affecté par une faille qui permet à un attaquant distant d'exécuter du code arbitraire sur le système. Étant donné que cel…
10.0 ÉLEVÉE
CVE-2011-0751Les serveurs web Nostromo (nhttpd) version 1.9.3 et antérieures sont sensibles à une faille de traversée de répertoire (directory traversal). Un attaquant distant peut utiliser des…
7.5 ÉLEVÉE
CVE-2011-0745SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to disc…
4.0 MOYENNE
CVE-2011-0648Les serveurs de sauvegarde EMC Avamar antérieurs à la version 5.0.4-30 sont sensibles à une faille d'escalade de privilèges. Un utilisateur distant disposant d'identifiants de conn…
8.5 ÉLEVÉE
CVE-2011-0442The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to o…
3.5 FAIBLE
CVE-2011-0411The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows m…
6.8 MOYENNE
CVE-2011-0322Les serveurs EMC RSA Access Manager (versions 5.5.x, 6.0.x et 6.1.x) sont vulnérables à une faille qui permet à des attaquants distants d'obtenir un accès non autorisé aux ressourc…
7.5 ÉLEVÉE
CVE-2011-1427Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Language parameter to Pages/logi…
4.3 MOYENNE
CVE-2011-1147Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.…
6.8 MOYENNE
CVE-2011-1146libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS c…
6.9 MOYENNE
CVE-2011-1092Les versions de PHP antérieures à 5.3.6 utilisant l'extension de mémoire partagée (shmop) sont affectées par un dépassement d'entier. Un attaquant non authentifié peut envoyer une …
7.5 ÉLEVÉE
CVE-2011-0695Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (…
5.7 MOYENNE