CVE-2011-2193TORQUE Resource Manager (versions 2.x, 2.5.x et 3.x) contient des failles de dépassement de tampon qui permettent aux utilisateurs d'élever leurs privilèges sur le système. Un atta…
8.5 ÉLEVÉE
CVE-2011-1908Les versions de Foxit Reader antérieures à la 4.0.0.0619 sont affectées par une faille dans la manière dont le logiciel traite certains types de polices. Un attaquant peut exécuter…
9.3 ÉLEVÉE
CVE-2011-1770Les noyaux Linux antérieurs à la version 2.6.33.14 sont concernés s'ils ont activé le protocole DCCP (Datagram Congestion Control Protocol). Un attaquant distant peut faire planter…
7.5 ÉLEVÉE
CVE-2011-1409Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a …
5.0 MOYENNE
CVE-2011-1132The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (NULL pointer dereference and reboot) via vectors involving so…
4.9 MOYENNE
CVE-2011-0213Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG f…
6.8 MOYENNE
CVE-2011-0212servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU an…
6.4 MOYENNE
CVE-2011-0211Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie…
6.8 MOYENNE
CVE-2011-0210QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted sampl…
6.8 MOYENNE
CVE-2011-0209Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF …
6.8 MOYENNE
CVE-2011-0208QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafte…
6.8 MOYENNE
CVE-2011-0207The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potent…
5.0 MOYENNE
CVE-2011-0206Les versions d'Apple Mac OS X antérieures à la 10.6.8 sont concernées en raison d'une faille dans la gestion des chaînes de caractères en majuscules de la bibliothèque ICU. Un atta…
7.5 ÉLEVÉE
CVE-2011-0205Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craft…
6.8 MOYENNE
CVE-2011-0204Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craft…
6.8 MOYENNE
CVE-2011-0203Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root d…
5.0 MOYENNE
CVE-2011-0202Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted em…
6.8 MOYENNE
CVE-2011-0201Les versions d'Apple Mac OS X antérieures à 10.6.8 sont affectées par une erreur de mémoire dans le framework CoreFoundation. Un attaquant peut envoyer une chaîne de caractères spé…
7.5 ÉLEVÉE
CVE-2011-0200Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image contai…
6.8 MOYENNE
CVE-2011-0199The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allo…
5.9 MOYENNE
CVE-2011-0198Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font.
6.8 MOYENNE
CVE-2011-0197App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log f…
2.1 FAIBLE
CVE-2011-0196Les systèmes Apple Mac OS X 10.5.8 sont susceptibles de subir un plantage et un redémarrage automatique provoqués par des trames Wi-Fi spécialement conçues. Un attaquant situé à po…
7.8 ÉLEVÉE
CVE-2009-5044contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
3.3 FAIBLE
CVE-2011-2534Les noyaux Linux antérieurs à la version 2.6.39 utilisant le module netfilter `CLUSTERIP` sont concernés. Un utilisateur local disposant d'un accès compte basique peut déclencher u…
7.8 ÉLEVÉE
CVE-2011-2533The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
3.3 FAIBLE
CVE-2011-2206XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CP…
5.5 MOYENNE
CVE-2011-2200The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-nati…
4.6 MOYENNE
CVE-2011-1330Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTM…
4.3 MOYENNE
CVE-2011-1173The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information f…
5.0 MOYENNE
CVE-2011-1172net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of c…
2.1 FAIBLE
CVE-2011-1171net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of ce…
2.1 FAIBLE
CVE-2011-1170net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of c…
2.1 FAIBLE
CVE-2011-2532The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstr…
5.0 MOYENNE
CVE-2011-2531Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of servic…
4.3 MOYENNE
CVE-2011-2530Les versions de Rockwell Automation RSLinx Classic antérieures à 2.58 sont concernées par une faille dans la manière dont le logiciel traite les fichiers d'installation matérielle …
9.3 ÉLEVÉE
CVE-2011-2205Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a craft…
5.0 MOYENNE
CVE-2011-2188LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a craf…
5.0 MOYENNE
CVE-2011-1757DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a …
5.0 MOYENNE
CVE-2011-1756modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory …
5.0 MOYENNE
CVE-2011-1755Les serveurs XMPP Jabberd2 antérieurs à la version 2.2.14 sont vulnérables à une attaque par épuisement des ressources. Un attaquant distant peut provoquer le plantage du service o…
7.5 ÉLEVÉE
CVE-2011-1754jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) vi…
5.0 MOYENNE
CVE-2011-1753expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers…
5.0 MOYENNE
CVE-2011-1482Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of admini…
6.8 MOYENNE
CVE-2011-1481Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_nam…
4.3 MOYENNE
CVE-2011-1480PHP-Nuke 8.0 et versions antérieures sont affectés par une faille dans le paramètre d'ID utilisateur de l'interface d'administration. Un attaquant distant non authentifié peut expl…
7.5 ÉLEVÉE
CVE-2011-1131The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has be…
5.0 MOYENNE
CVE-2011-1130Les versions plus anciennes de Simple Machines Forum (SMF) sont vulnérables aux injections SQL en raison d'une faille dans la gestion des paramètres de page. Un attaquant distant n…
7.5 ÉLEVÉE
CVE-2011-1129Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authent…
3.5 FAIBLE
CVE-2011-1128Les versions de Simple Machines Forum (SMF) antérieures à 1.1.13 et 2.0 RC5 sont affectées par une gestion inappropriée des tentatives de connexion infructueuses. Un attaquant dist…
7.5 ÉLEVÉE