CVE-2011-1595Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite a…
4.3 MOYENNE
CVE-2011-1521The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote att…
6.4 MOYENNE
CVE-2011-1424The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly…
3.5 FAIBLE
CVE-2011-1328Les versions de la suite RADVISION iVIEW antérieures à la version 7.5 sont vulnérables aux injections SQL. Un attaquant non authentifié disposant d'un accès réseau peut envoyer des…
7.5 ÉLEVÉE
CVE-2011-0418The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated use…
4.0 MOYENNE
CVE-2011-2165The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP …
6.8 MOYENNE
CVE-2011-1926The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted s…
5.1 MOYENNE
CVE-2011-1920The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend#####…
3.3 FAIBLE
CVE-2011-1766includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remot…
5.8 MOYENNE
CVE-2011-1765Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via…
4.3 MOYENNE
CVE-2011-1575The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into en…
5.8 MOYENNE
CVE-2009-5024ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as…
5.0 MOYENNE
CVE-2011-2164Les versions d'Adobe Photoshop antérieures à la 12.0.4 présentent des failles critiques permettant à un attaquant distant de compromettre totalement le système. En envoyant un fich…
10.0 ÉLEVÉE
CVE-2011-2163Le Virtualization Manager d'IBM Systems Director 1.2.2 est affecté par une faille qui permet à un attaquant distant de compromettre totalement la confidentialité, l'intégrité et la…
9.3 ÉLEVÉE
CVE-2011-2162Les anciennes versions de FFmpeg (de 0.4.x à 0.6.x) et les logiciels qui les utilisent, comme MPlayer 1.0 sur certaines distributions Mandriva Linux, sont vulnérables à des failles…
10.0 ÉLEVÉE
CVE-2011-2161The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a d…
4.3 MOYENNE
CVE-2011-2160Les versions de FFmpeg antérieures à la 0.5.4, ainsi que les logiciels qui l'utilisent comme MPlayer, sont sensibles à une lecture hors limites lors du traitement de fichiers vidéo…
9.3 ÉLEVÉE
CVE-2011-2159Les serveurs web SmarterTools SmarterStats 6.0 n'incluent pas d'en-tête Content-Type pour plusieurs fichiers spécifiques, ce qui peut entraîner des « conflits d'interprétation » où…
10.0 ÉLEVÉE
CVE-2011-2158Les serveurs web SmarterTools SmarterStats 6.0 étiquettent incorrectement certains fichiers lors de leur envoi vers un navigateur, ce qui peut entraîner des « conflits d'interpréta…
10.0 ÉLEVÉE
CVE-2011-2157The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addr…
5.0 MOYENNE
CVE-2011-2156The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3) Admin/GettingSta…
5.0 MOYENNE
CVE-2011-2155Les serveurs web SmarterTools SmarterStats 6.0 ne désactivent pas la fonction de saisie automatique (autocomplete) dans le champ du mot de passe de connexion. Un attaquant ayant un…
7.5 ÉLEVÉE
CVE-2011-2154login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote …
5.0 MOYENNE
CVE-2011-2153Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent …
5.0 MOYENNE
CVE-2011-2152The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2) …
5.0 MOYENNE
CVE-2011-2151The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools Sma…
5.0 MOYENNE
CVE-2011-2150The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial…
5.0 MOYENNE
CVE-2011-2149Les serveurs web SmarterStats 6.0 sont sensibles à plusieurs failles d'injection SQL déclenchées via certains paramètres de page, cookies ou en-têtes HTTP. Un attaquant peut exploi…
7.5 ÉLEVÉE
CVE-2011-2148Les serveurs web SmarterTools SmarterStats 6.0 sont vulnérables à l'injection de commandes à distance via divers paramètres d'entrée et cookies. Un attaquant peut exécuter des comm…
10.0 ÉLEVÉE
CVE-2011-2147Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local us…
3.6 FAIBLE
CVE-2011-2021Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
4.3 MOYENNE
CVE-2011-2020Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML …
4.3 MOYENNE
CVE-2011-1838Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl paramete…
4.3 MOYENNE
CVE-2011-1784The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/…
3.6 FAIBLE
CVE-2011-1582Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote a…
4.3 MOYENNE
CVE-2011-1327The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to…
2.1 FAIBLE
CVE-2011-0966Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitra…
6.8 MOYENNE
CVE-2011-0962Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before…
4.3 MOYENNE
CVE-2011-0961Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrar…
4.3 MOYENNE
CVE-2011-0960Cisco Unified Operations Manager (versions antérieures à 8.6) est vulnérable aux injections SQL via certains paramètres web. Un attaquant non authentifié disposant d'un accès résea…
7.5 ÉLEVÉE
CVE-2011-0959Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the …
4.3 MOYENNE
CVE-2011-0723FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-…
6.8 MOYENNE
CVE-2011-0722FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute …
6.8 MOYENNE
CVE-2010-3908FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbit…
6.8 MOYENNE
CVE-2010-0217Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (C…
5.8 MOYENNE
CVE-2009-5075Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file.
4.3 MOYENNE
CVE-2006-7245Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file that lacks NULL termination.
4.3 MOYENNE
CVE-2011-2144The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a lon…
5.0 MOYENNE
CVE-2011-2143IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunctio…
6.8 MOYENNE
CVE-2011-2142The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors.
5.0 MOYENNE