Overview 16,593 matches · 103 in Waratek scope · 16 protected · 0 exploited · 0 CISA KEV · 675 EPSS ≥ 0.5
16,593matches
103in Waratek scope0.6%
16protected0.1%
0exploited0.0%
0CISA KEV0.0%
675EPSS ≥ 0.54.1%
Protected by Waratek
16
0.1%
Rule in development
0
0.0%
Mitigation candidate
87
0.5%
No exploit published
0
0.0%
Outside Waratek scope
65
0.4%
Not applicable
16,393
98.8%
Withdrawn CVE
32
0.2%
blocked by ARMR today
16
0.1%
partly blocked
0
0.0%
not blocked
16,577
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
16,593
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 2,591 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001480
Mitigation candidate2
Outside Waratek scope4
Not applicable474
Critical4
High219
Medium219
Low38
not blocked480
Working exploit published480
2002545
Mitigation candidate8
Outside Waratek scope4
Not applicable531
Withdrawn CVE2
Critical3
High276
Medium246
Low18
Unknown2
not blocked545
Working exploit published545
2003499
Protected by Waratek1
Mitigation candidate7
Outside Waratek scope2
Not applicable488
Withdrawn CVE1
Critical3
High236
Medium243
Low16
Unknown1
blocked by ARMR today1
not blocked498
Working exploit published499
2004755
Mitigation candidate1
Outside Waratek scope1
Not applicable753
Critical3
High302
Medium414
Low36
not blocked755
Working exploit published755
20051,341
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope4
Not applicable1,327
Withdrawn CVE5
Critical4
High658
Medium622
Low52
Unknown5
blocked by ARMR today1
not blocked1,340
Working exploit published1,341
20062,440
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope7
Not applicable2,425
Withdrawn CVE3
Critical4
High1,197
Medium1,137
Low99
Unknown3
blocked by ARMR today1
not blocked2,439
Working exploit published2,440
20072,495
Protected by Waratek1
Mitigation candidate10
Outside Waratek scope11
Not applicable2,470
Withdrawn CVE3
Critical6
High1,405
Medium1,052
Low29
Unknown3
blocked by ARMR today1
not blocked2,494
Working exploit published2,495
20082,518
Protected by Waratek3
Mitigation candidate9
Outside Waratek scope6
Not applicable2,495
Withdrawn CVE5
Critical4
High1,492
Medium987
Low30
Unknown5
blocked by ARMR today3
not blocked2,515
Working exploit published2,518
20092,591
Protected by Waratek4
Mitigation candidate12
Outside Waratek scope9
Not applicable2,560
Withdrawn CVE6
Critical5
High1,424
Medium1,123
Low33
Unknown6
blocked by ARMR today4
not blocked2,587
Working exploit published2,591
20101,313
Protected by Waratek3
Mitigation candidate11
Outside Waratek scope7
Not applicable1,290
Withdrawn CVE2
Critical6
High730
Medium547
Low28
Unknown2
blocked by ARMR today3
not blocked1,310
Working exploit published1,313
2011691
Protected by Waratek2
Mitigation candidate9
Outside Waratek scope5
Not applicable672
Withdrawn CVE3
Critical1
High380
Medium294
Low13
Unknown3
blocked by ARMR today2
not blocked689
Working exploit published691
201260
Mitigation candidate4
Outside Waratek scope3
Not applicable53
High18
Medium41
Low1
not blocked60
Working exploit published60
1988199019921994199619982000200220042006200820102012
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2012-0937 | Medium | 2012-01-30 | Not applicable | Working exploit published | wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time |
| CVE-2012-0782 | Medium | 2012-01-30 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance |
| CVE-2011-4899 | High | 2012-01-30 | Not applicable | Working exploit published | wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments |
| CVE-2011-4898 | Medium | 2012-01-30 | Not applicable | Working exploit published | wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective |
| CVE-2012-0935 | High | 2012-01-29 | Not applicable | Working exploit published | SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter. |
| CVE-2012-0933 | Low | 2012-01-29 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/. |
| CVE-2012-0932 | Medium | 2012-01-29 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter. |
| CVE-2011-5075 | Medium | 2012-01-29 | Not applicable | Working exploit published | translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path. |
| CVE-2011-5074 | Medium | 2012-01-29 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via (1) user_profile_edit.php or (2) user_add.php. |
| CVE-2011-5073 | Medium | 2012-01-29 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to contact_support.php; (2) contractid parameter to contract_add_service.php; (3) user parameter to edit_backup_users.php; (4) id parameter to edit_escalation_path.php; the Referer to (5) forgotpwd.php, (6) an approvalpage action to billable_incidents.php, or (7) transactions.php; (8) action parameter to inbox.php; (9) search_string parameter in a findcontact action to incident_add.php; table1 parameter to (10) report_customers.php, (11) report_incidents_by_engineer.php, (12) report_incidents_by_site.php, or (13) report_marketing.php; or the (14) startdate or (15) enddate parameter to report_incidents_by_vendor.php. |
| CVE-2011-5072 | High | 2012-01-29 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to execute arbitrary SQL commands via the (1) start parameter to portal/kb.php; (2) contractid parameter to contract_add_service.php; (3) id parameter to edit_escalation_path.php; (4) unlock, (5) lock, or (6) selected parameter to holding_queue.php; inc parameter in a report action to (7) report_customers.php or (8) report_incidents_by_site.php; (9) start parameter to search.php; or (10) sites parameter to transactions.php. |
| CVE-2011-5071 | High | 2012-01-29 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information. |
| CVE-2011-4337 | High | 2012-01-29 | Not applicable | Working exploit published | Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable. |
| CVE-2011-3833 | Medium | 2012-01-29 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory. |
| CVE-2011-3829 | Medium | 2012-01-29 | Not applicable | Working exploit published | ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message. |
| CVE-2012-0053 | Medium | 2012-01-28 | Outside Waratek scope | Working exploit published | protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script. |
| CVE-2011-3479 | Medium | 2012-01-25 | Not applicable | Working exploit published | Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file. |
| CVE-2011-3478 | High | 2012-01-25 | Not applicable | Working exploit published | The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631. |
| CVE-2012-0913 | High | 2012-01-24 | Not applicable | Working exploit published | SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information. |
| CVE-2012-0389 | Medium | 2012-01-24 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter. |
| CVE-2012-0286 | Medium | 2012-01-24 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts. |
| CVE-2012-0285 | Medium | 2012-01-24 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2012-0906 | High | 2012-01-20 | Not applicable | Working exploit published | SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php. |
| CVE-2012-0905 | High | 2012-01-20 | Not applicable | Working exploit published | SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php. |
| CVE-2012-0904 | Medium | 2012-01-20 | Not applicable | Working exploit published | VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file. |
| CVE-2012-0902 | Medium | 2012-01-20 | Not applicable | Working exploit published | AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader. |
| CVE-2012-0901 | Medium | 2012-01-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. |
| CVE-2012-0900 | Medium | 2012-01-20 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php. |
| CVE-2012-0899 | Medium | 2012-01-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter. |
| CVE-2012-0897 | Medium | 2012-01-20 | Not applicable | Working exploit published | Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. |
| CVE-2012-0896 | Medium | 2012-01-20 | Not applicable | Working exploit published | Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter. |
| CVE-2012-0895 | Medium | 2012-01-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter. |
| CVE-2011-4135 | High | 2012-01-19 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389. |
| CVE-2012-0781 | Medium | 2012-01-18 | Not applicable | Working exploit published | The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153. |
| CVE-2012-0031 | Medium | 2012-01-18 | Outside Waratek scope | Working exploit published | scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function. |
| CVE-2011-4153 | Medium | 2012-01-18 | Not applicable | Working exploit published | PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c. |
| CVE-2012-0267 | High | 2012-01-15 | Not applicable | Working exploit published | The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer. |
| CVE-2012-0266 | High | 2012-01-15 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL. |
| CVE-2011-4789 | High | 2012-01-13 | Not applicable | Working exploit published | Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner." |
| CVE-2011-3597 | High | 2012-01-13 | Not applicable | Working exploit published | Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor. |
| CVE-2011-4786 | High | 2012-01-12 | Not applicable | Working exploit published | A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787. |
| CVE-2012-0013 | High | 2012-01-10 | Not applicable | Working exploit published | Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability." |
| CVE-2012-0007 | Medium | 2012-01-10 | Not applicable | Working exploit published | The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability." |
| CVE-2012-0394 | Medium | 2012-01-08 | Outside Waratek scope | Working exploit published | The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself. |
| CVE-2012-0393 | Medium | 2012-01-08 | Mitigation candidate | Working exploit published | The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object. |
| CVE-2012-0392 | Medium | 2012-01-08 | Mitigation candidate | Working exploit published | The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method. |
| CVE-2011-5057 | Medium | 2012-01-08 | Mitigation candidate | Working exploit published | Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that implements an affected interface, as demonstrated by the SessionAware, RequestAware, ApplicationAware, ServletRequestAware, ServletResponseAware, and ParameterAware interfaces. NOTE: the vendor disputes the significance of this report because of an "easy work-around in existing apps by configuring the interceptor." |
| CVE-2011-4532 | Medium | 2012-01-08 | Not applicable | Working exploit published | Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method. |
| CVE-2011-4531 | Medium | 2012-01-08 | Not applicable | Working exploit published | Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command. |
| CVE-2011-4530 | Medium | 2012-01-08 | Not applicable | Working exploit published | Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function. |
| CVE-2011-4529 | High | 2012-01-08 | Not applicable | Working exploit published | Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command. |
| CVE-2011-5053 | Medium | 2012-01-06 | Not applicable | Working exploit published | The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages. |
| CVE-2011-5019 | Medium | 2012-01-05 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter. |
| CVE-2011-4858 | Medium | 2012-01-05 | Mitigation candidate | Working exploit published | Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. |
| CVE-2011-5052 | Medium | 2012-01-04 | Not applicable | Working exploit published | Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request. |
| CVE-2011-5050 | Medium | 2012-01-04 | Not applicable | Working exploit published | SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information. |
| CVE-2011-5049 | Medium | 2012-01-04 | Not applicable | Working exploit published | MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet to TCP port 3306. |
| CVE-2011-4644 | High | 2012-01-03 | Not applicable | Working exploit published | Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request. |
| CVE-2011-4643 | Medium | 2012-01-03 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243. |
| CVE-2011-4642 | Medium | 2012-01-03 | Not applicable | Working exploit published | mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as demonstrated by a cross-site request forgery (CSRF) attack, aka SPL-45172. |
| CVE-2011-4620 | High | 2011-12-31 | Not applicable | Working exploit published | Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information. |
| CVE-2011-5046 | High | 2011-12-30 | Not applicable | Working exploit published | The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability." |
| CVE-2011-5045 | Medium | 2011-12-30 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter. |
| CVE-2011-5044 | High | 2011-12-30 | Not applicable | Working exploit published | SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program. |
| CVE-2011-5043 | Medium | 2011-12-30 | Not applicable | Working exploit published | TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long string in an MP3 file, possibly a buffer overflow. |
| CVE-2011-5041 | Medium | 2011-12-30 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php. |
| CVE-2011-5040 | Medium | 2011-12-30 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php. |
| CVE-2011-5039 | High | 2011-12-30 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php. |
| CVE-2011-5035 | Medium | 2011-12-30 | Outside Waratek scope | Working exploit published | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869. |
| CVE-2011-5034 | High | 2011-12-30 | Mitigation candidate | Working exploit published | Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461. |
| CVE-2011-4885 | Medium | 2011-12-30 | Not applicable | Working exploit published | PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. |
| CVE-2011-4084 | Unknown | 2011-12-30 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4858. Reason: This candidate is a duplicate of CVE-2011-4858. Notes: All CVE users should reference CVE-2011-4858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. |
| CVE-2011-5033 | Medium | 2011-12-29 | Not applicable | Working exploit published | Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file. |
| CVE-2011-5031 | High | 2011-12-29 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) dfuserid and (2) dfpassword parameters. NOTE: some of these details are obtained from third party information. |
| CVE-2011-5028 | Medium | 2011-12-29 | Not applicable | Working exploit published | Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter. |
| CVE-2011-5026 | Medium | 2011-12-29 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information. |
| CVE-2011-5025 | Medium | 2011-12-29 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) the index parameter to showOldPage.yaws, (3) the node parameter to allRefsToMe.yaws, or (4) the text parameter to editPage.yaws. |
| CVE-2011-5023 | Medium | 2011-12-29 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-2011-3986. |
| CVE-2011-5022 | High | 2011-12-29 | Not applicable | Working exploit published | SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter. |
| CVE-2011-4166 | High | 2011-12-27 | Not applicable | Working exploit published | Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data. |
| CVE-2011-5012 | High | 2011-12-25 | Not applicable | Working exploit published | Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command. |
| CVE-2011-5009 | Medium | 2011-12-25 | Not applicable | Working exploit published | The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method. |
| CVE-2011-5007 | High | 2011-12-25 | Not applicable | Working exploit published | Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080. |
| CVE-2011-5006 | High | 2011-12-25 | Not applicable | Working exploit published | Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file. |
| CVE-2011-5005 | High | 2011-12-25 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory. |
| CVE-2011-5003 | High | 2011-12-25 | Not applicable | Working exploit published | Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659. |
| CVE-2011-5002 | High | 2011-12-25 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long (1) Word, (2) Transition, (3) Location, (4) Extension, (5) SceneIntro, (6) TimeOfDay, and (7) Character elements. |
| CVE-2011-5001 | High | 2011-12-25 | Not applicable | Working exploit published | Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101. |
| CVE-2010-5081 | High | 2011-12-25 | Not applicable | Working exploit published | Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file. |
| CVE-2009-5109 | High | 2011-12-25 | Not applicable | Working exploit published | Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file. |
| CVE-2011-4362 | Medium | 2011-12-24 | Not applicable | Working exploit published | Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index. |
| CVE-2011-4453 | High | 2011-12-22 | Not applicable | Working exploit published | The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function. |
| CVE-2011-3658 | High | 2011-12-21 | Not applicable | Working exploit published | The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements. |
| CVE-2011-4779 | Unknown | 2011-12-20 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4642. Reason: This candidate is a reservation duplicate of CVE-2011-4642. Notes: All CVE users should reference CVE-2011-4642 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2011-4717 | Medium | 2011-12-20 | Not applicable | Working exploit published | Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command. |
| CVE-2011-4837 | Medium | 2011-12-15 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs. |
| CVE-2011-4836 | Medium | 2011-12-15 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI. |
| CVE-2011-4835 | High | 2011-12-15 | Not applicable | Working exploit published | Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors. |
| CVE-2011-4834 | Medium | 2011-12-15 | Not applicable | Working exploit published | The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt. |
| CVE-2011-4833 | High | 2011-12-15 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the (1) where and (2) order parameters in a get_full_list action to index.php. |