CVE-2011-1592The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows …
4.3 MOYENNE
CVE-2011-1591Les versions 1.4.0 à 1.4.4 de Wireshark sont affectées par une faille de corruption de mémoire dans la manière dont le logiciel traite les paquets réseau DECT. Un attaquant peut ex…
9.3 ÉLEVÉE
CVE-2011-1590The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial…
4.3 MOYENNE
CVE-2011-1589Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.
5.0 MOYENNE
CVE-2011-1543Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unkno…
4.3 MOYENNE
CVE-2011-1542Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2011-1541Les versions de HP System Management Homepage (SMH) antérieures à la version 6.3 sont affectées par une faille permettant à des attaquants distants de contourner les contrôles d'ac…
10.0 ÉLEVÉE
CVE-2011-1540HP System Management Homepage (versions antérieures à 6.3) est vulnérable à l'exécution de code à distance. Un attaquant disposant d'identifiants de connexion valides peut envoyer …
9.0 ÉLEVÉE
CVE-2011-1536Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41.002 allows remote attackers to obtain sensitive information via unknown vectors.
5.0 MOYENNE
CVE-2011-1535Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux) before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denia…
6.0 MOYENNE
CVE-2011-1499acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attacke…
2.6 FAIBLE
CVE-2011-0729Les versions de Language-selector antérieures à 0.6.7 sur les systèmes Linux ne parviennent pas à appliquer correctement les contrôles d'autorisation lors de la modification des pa…
7.2 ÉLEVÉE
CVE-2011-1839IBM Rational Build Forge 7.1.0 uses the HTTP GET method during redirection from the authentication servlet to a PHP script, which makes it easier for context-dependent attackers to…
5.0 MOYENNE
CVE-2011-1719CA Output Management Web Viewer (versions 11.0 et 11.5) est affecté par des failles dans ses contrôles ActiveX. Un attaquant distant non authentifié peut exécuter du code arbitrair…
9.3 ÉLEVÉE
CVE-2011-1718The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct i…
4.3 MOYENNE
CVE-2011-1725Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors.
5.0 MOYENNE
CVE-2011-1599Les systèmes PBX Asterisk utilisant des versions affectées des éditions Open Source ou Business sont susceptibles de permettre l'exécution de commandes à distance. Un attaquant dis…
9.0 ÉLEVÉE
CVE-2011-1587Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via…
4.3 MOYENNE
CVE-2011-1586Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attacke…
5.8 MOYENNE
CVE-2011-1580The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSource…
3.5 FAIBLE
CVE-2011-1579The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which all…
5.8 MOYENNE
CVE-2011-1578Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via…
4.3 MOYENNE
CVE-2011-1507Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not r…
5.0 MOYENNE
CVE-2010-4801Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filepath pa…
6.0 MOYENNE
CVE-2010-4800BaconMap 1.0 est affecté par une faille dans le fichier `doadd.php` qui permet à un attaquant d'envoyer des commandes SQL malveillantes à la base de données. En exploitant cette vu…
7.5 ÉLEVÉE
CVE-2010-4799Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and…
6.8 MOYENNE
CVE-2010-4798Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the ur…
6.8 MOYENNE
CVE-2010-4797Truworth Flex Timesheet est affecté par des failles d'injection SQL dans son formulaire de connexion. Un attaquant distant peut exécuter des commandes de base de données arbitraire…
7.5 ÉLEVÉE
CVE-2010-4796PHPYun 1.1.6 est affecté par des failles d'injection SQL dans ses pages de recherche et de consultation de CV. Un attaquant distant peut envoyer des requêtes spécialement conçues v…
7.5 ÉLEVÉE
CVE-2010-4795Les sites Joomla! utilisant le composant JS Calendar (versions 1.5.1 et 1.5.4) sont vulnérables à une faille d'injection SQL. Un attaquant distant non authentifié peut envoyer une …
7.5 ÉLEVÉE
CVE-2010-4794Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrar…
4.3 MOYENNE
CVE-2010-4793Site2Nite Auto e-Manager est affecté par une faille dans sa page `detail.asp` qui permet à des attaquants distants d'exécuter des commandes SQL arbitraires. Un attaquant peut utili…
7.5 ÉLEVÉE
CVE-2010-4792Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter.
4.3 MOYENNE
CVE-2010-4791Les sites PHP-Fusion utilisant le module MG User-Fotoalbum (version 1.0.1) sont vulnérables à une injection SQL via le paramètre `album_id`. Un attaquant distant non authentifié pe…
7.5 ÉLEVÉE
CVE-2010-4790Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a …
5.8 MOYENNE
CVE-2010-3260oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms before 3.9 does not properly restrict DTDs in Ajax requests, whi…
6.4 MOYENNE
CVE-2010-2789PHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code v…
6.8 MOYENNE
CVE-2010-2788Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script …
2.6 FAIBLE
CVE-2010-2787api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain …
4.3 MOYENNE
CVE-2011-1690Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vect…
4.3 MOYENNE
CVE-2011-1689Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to…
4.3 MOYENNE
CVE-2011-1688Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary f…
4.3 MOYENNE
CVE-2011-1687Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the s…
4.0 MOYENNE
CVE-2011-1686Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to ex…
6.5 MOYENNE
CVE-2011-1685Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote authent…
4.6 MOYENNE
CVE-2011-1534Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows remote authenticated users to obtain access to processes via unknown vectors.
6.5 MOYENNE
CVE-2011-1422Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to …
4.3 MOYENNE
CVE-2011-1421EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gai…
6.9 MOYENNE
CVE-2011-1822The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users…
2.1 FAIBLE
CVE-2011-1821IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog sear…
4.0 MOYENNE