CVEs

346,392 total · page 6000 of 6,928

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2011-2534	Linux Kernel	Hig	0.51	7.8	0.00	Jun 22, 2011	Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a…
CVE-2011-2533	Xorg Dbus		0.00	—	0.00	Jun 22, 2011	The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
CVE-2011-2206	Djabberd DJabberd		0.00	—	0.01	Jun 22, 2011	XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity…
CVE-2011-2200	Xorg Dbus		0.00	—	0.00	Jun 22, 2011	The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain…
CVE-2011-1330	Kbs Weblygo		0.00	—	0.01	Jun 22, 2011	Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-1173	Linux Kernel		0.00	—	0.03	Jun 22, 2011	The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal…
CVE-2011-1172	Linux Kernel		0.00	—	0.00	Jun 22, 2011	net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from…
CVE-2011-1171	Linux Kernel		0.00	—	0.00	Jun 22, 2011	net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from…
CVE-2011-1170	Linux Kernel		0.00	—	0.00	Jun 22, 2011	net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from…
CVE-2011-2532	Prosody Prosody		0.00	—	0.01	Jun 22, 2011	The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
CVE-2011-2531	Prosody Prosody		0.00	—	0.01	Jun 22, 2011	Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.
CVE-2011-2530	Rockwellautomation Rslinx		0.01	—	0.08	Jun 22, 2011	Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a…
CVE-2011-2205	Prosody Prosody		0.00	—	0.02	Jun 22, 2011	Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-2188	LuaExpat LuaExpat		0.00	—	0.02	Jun 21, 2011	LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1757	Djabberd DJabberd		0.00	—	0.01	Jun 21, 2011	DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1756	Citadel Citadel		0.00	—	0.03	Jun 21, 2011	modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity…
CVE-2011-1755	Jabber Jabberd	Hig	0.49	7.5	0.04	Jun 21, 2011	jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1754	Jabberstudio Jabberd14		0.00	—	0.02	Jun 21, 2011	jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1753	Process One Ejabberd		0.00	—	0.02	Jun 21, 2011	expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a…
CVE-2011-1482	PHP-Nuke PHP Nuke		0.00	—	0.01	Jun 21, 2011	Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a…
CVE-2011-1481	PHP-Nuke PHP Nuke		0.00	—	0.01	Jun 21, 2011	Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.
CVE-2011-1480	PHP-Nuke PHP Nuke		0.00	—	0.01	Jun 21, 2011	SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.
CVE-2011-1131	Simple Machines Smf		0.00	—	0.01	Jun 21, 2011	The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table…
CVE-2011-1130	Simple Machines Smf		0.00	—	0.01	Jun 21, 2011	Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the…
CVE-2011-1129	Simple Machines Smf		0.00	—	0.01	Jun 21, 2011	Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.
CVE-2011-1128	Simple Machines Smf		0.00	—	0.02	Jun 21, 2011	The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
CVE-2011-1127	Simple Machines Smf		0.00	—	0.02	Jun 21, 2011	SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
CVE-2011-2202	PHP PHP		0.05	—	0.20	Jun 16, 2011	The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a…
CVE-2011-2128	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2127.
CVE-2011-2127	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2128.
CVE-2011-2126	Adobe Inc. Shockwave Player		0.01	—	0.07	Jun 16, 2011	Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2125	Adobe Inc. Shockwave Player		0.01	—	0.07	Jun 16, 2011	Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2124	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2127, and CVE-2011-2128.
CVE-2011-2123	Adobe Inc. Shockwave Player		0.01	—	0.07	Jun 16, 2011	Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.
CVE-2011-2122	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to rcsL substructures, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319,…
CVE-2011-2121	Adobe Inc. Shockwave Player		0.00	—	0.06	Jun 16, 2011	Integer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2120	Adobe Inc. Shockwave Player		0.00	—	0.05	Jun 16, 2011	Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2119	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335,…
CVE-2011-2118	Adobe Inc. Shockwave Player		0.00	—	0.05	Jun 16, 2011	The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."
CVE-2011-2117	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128.
CVE-2011-2116	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115.
CVE-2011-2115	Adobe Inc. Shockwave Player		0.01	—	0.08	Jun 16, 2011	IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted tSAC chunk, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-2111 and…
CVE-2011-2114	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2117, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128.
CVE-2011-2113	Adobe Inc. Shockwave Player		0.00	—	0.06	Jun 16, 2011	Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2112	Adobe Inc. Shockwave Player		0.01	—	0.07	Jun 16, 2011	Multiple buffer overflows in IML32.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2111	Adobe Inc. Shockwave Player		0.00	—	0.04	Jun 16, 2011	IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2115 and CVE-2011-2116.
CVE-2011-2110	Adobe Inc. Flashplayer		0.10	—	0.86	Jun 16, 2011	Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June…
CVE-2011-2109	Adobe Inc. Shockwave Player		0.01	—	0.08	Jun 16, 2011	Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2108	Adobe Inc. Shockwave Player		0.00	—	0.06	Jun 16, 2011	Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw."
CVE-2011-2106	Adobe Inc. Acrobat		0.00	—	0.06	Jun 16, 2011	Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVE-2011-2534HigJun 22, 2011
Linux
Kernel
risk 0.51cvss 7.8epss 0.00
Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a…
CVE-2011-2533Jun 22, 2011
Xorg
Dbus
risk 0.00cvss —epss 0.00
The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
CVE-2011-2206Jun 22, 2011
Djabberd
DJabberd
risk 0.00cvss —epss 0.01
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity…
CVE-2011-2200Jun 22, 2011
Xorg
Dbus
risk 0.00cvss —epss 0.00
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain…
CVE-2011-1330Jun 22, 2011
Kbs
Weblygo
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-1173Jun 22, 2011
Linux
Kernel
risk 0.00cvss —epss 0.03
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal…
CVE-2011-1172Jun 22, 2011
Linux
Kernel
risk 0.00cvss —epss 0.00
net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from…
CVE-2011-1171Jun 22, 2011
Linux
Kernel
risk 0.00cvss —epss 0.00
net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from…
CVE-2011-1170Jun 22, 2011
Linux
Kernel
risk 0.00cvss —epss 0.00
net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from…
CVE-2011-2532Jun 22, 2011
Prosody
Prosody
risk 0.00cvss —epss 0.01
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
CVE-2011-2531Jun 22, 2011
Prosody
Prosody
risk 0.00cvss —epss 0.01
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.
CVE-2011-2530Jun 22, 2011
Rockwellautomation
Rslinx
risk 0.01cvss —epss 0.08
Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a…
CVE-2011-2205Jun 22, 2011
Prosody
Prosody
risk 0.00cvss —epss 0.02
Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-2188Jun 21, 2011
LuaExpat
LuaExpat
risk 0.00cvss —epss 0.02
LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1757Jun 21, 2011
Djabberd
DJabberd
risk 0.00cvss —epss 0.01
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1756Jun 21, 2011
Citadel
Citadel
risk 0.00cvss —epss 0.03
modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity…
CVE-2011-1755HigJun 21, 2011
Jabber
Jabberd
risk 0.49cvss 7.5epss 0.04
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1754Jun 21, 2011
Jabberstudio
Jabberd14
risk 0.00cvss —epss 0.02
jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to…
CVE-2011-1753Jun 21, 2011
Process One
Ejabberd
risk 0.00cvss —epss 0.02
expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a…
CVE-2011-1482Jun 21, 2011
PHP-Nuke
PHP Nuke
risk 0.00cvss —epss 0.01
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a…
CVE-2011-1481Jun 21, 2011
PHP-Nuke
PHP Nuke
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.
CVE-2011-1480Jun 21, 2011
PHP-Nuke
PHP Nuke
risk 0.00cvss —epss 0.01
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.
CVE-2011-1131Jun 21, 2011
Simple Machines
Smf
risk 0.00cvss —epss 0.01
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table…
CVE-2011-1130Jun 21, 2011
Simple Machines
Smf
risk 0.00cvss —epss 0.01
Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the…
CVE-2011-1129Jun 21, 2011
Simple Machines
Smf
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.
CVE-2011-1128Jun 21, 2011
Simple Machines
Smf
risk 0.00cvss —epss 0.02
The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
CVE-2011-1127Jun 21, 2011
Simple Machines
Smf
risk 0.00cvss —epss 0.02
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
CVE-2011-2202Jun 16, 2011
PHP
PHP
risk 0.05cvss —epss 0.20
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a…
CVE-2011-2128Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2127.
CVE-2011-2127Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2128.
CVE-2011-2126Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.01cvss —epss 0.07
Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2125Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.01cvss —epss 0.07
Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2124Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2127, and CVE-2011-2128.
CVE-2011-2123Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.01cvss —epss 0.07
Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.
CVE-2011-2122Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to rcsL substructures, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319,…
CVE-2011-2121Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.06
Integer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2120Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.05
Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2119Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335,…
CVE-2011-2118Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.05
The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."
CVE-2011-2117Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128.
CVE-2011-2116Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115.
CVE-2011-2115Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.01cvss —epss 0.08
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted tSAC chunk, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-2111 and…
CVE-2011-2114Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2117, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128.
CVE-2011-2113Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.06
Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2112Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.01cvss —epss 0.07
Multiple buffer overflows in IML32.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2111Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.04
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2115 and CVE-2011-2116.
CVE-2011-2110Jun 16, 2011
Adobe Inc.
Flashplayer
risk 0.10cvss —epss 0.86
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June…
CVE-2011-2109Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.01cvss —epss 0.08
Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2108Jun 16, 2011
Adobe Inc.
Shockwave Player
risk 0.00cvss —epss 0.06
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw."
CVE-2011-2106Jun 16, 2011
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.06
Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.