| Page(s) : 1 ... 284 285 286 287 288 289 290 291 292 293 [294] 295 296 297 298 299 300 301 302 303 304 ... | Result(s) : 8831 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 3.5 | 2011-12-10 | CVE-2011-4346 | cve | Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML v... |
| 2.6 | 2011-12-01 | CVE-2011-4344 | cve | Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers... |
| 2.6 | 2011-11-29 | CVE-2011-4345 | cve | Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject arbitrary web script or HTML via a coo... |
| 3.5 | 2011-11-28 | CVE-2011-4560 | cve | Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML v... |
| 1.9 | 2011-11-25 | CVE-2011-1378 | cve | IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users ... |
| 3.2 | 2011-11-23 | CVE-2011-4160 | cve | Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-acces... |
| 3.3 | 2011-11-21 | CVE-2011-4497 | cve | QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request. |
| 2.6 | 2011-11-17 | CVE-2011-4457 | cve | OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information vi... |
| 3.5 | 2011-11-11 | CVE-2011-4436 | cve | Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbit... |
| 3.6 | 2011-11-11 | CVE-2011-4434 | cve | Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions v... |
| 1.2 | 2011-11-11 | CVE-2011-3440 | cve | The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by ope... |
| 2.6 | 2011-11-09 | CVE-2011-3985 | cve | Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| 2.6 | 2011-11-09 | CVE-2011-3649 | cve | Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the... |
| 1.5 | 2011-11-09 | CVE-2011-1373 | cve | Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows ... |
| 1.2 | 2011-11-08 | CVE-2011-4415 | cve | The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the ... |
| 3.6 | 2011-11-04 | CVE-2011-3171 | cve | Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Ne... |
| 1.7 | 2011-10-30 | CVE-2009-0905 | cve | IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations... |
| 2.6 | 2011-10-27 | CVE-2011-3872 | cve | Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master... |
| 1.2 | 2011-10-23 | CVE-2011-3163 | cve | HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors. |
| 1.8 | 2011-10-19 | CVE-2011-3561 | cve | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect co... |
| Page(s) : 1 ... 284 285 286 287 288 289 290 291 292 293 [294] 295 296 297 298 299 300 301 302 303 304 ... | Result(s) : 8831 |
