| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-2694 | 2.6 |
Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the usernam
|
31-10-2022 - 15:02 | 29-07-2011 - 20:55 | |
| CVE-2011-2522 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start
|
29-08-2022 - 20:20 | 29-07-2011 - 20:55 | |
| CVE-2011-2749 | 7.8 |
The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
|
01-04-2020 - 13:08 | 15-08-2011 - 21:55 | |
| CVE-2011-2748 | 7.8 |
The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.
|
08-01-2020 - 17:13 | 15-08-2011 - 21:55 | |
| CVE-2011-2981 | 9.3 |
The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Sam
|
19-09-2017 - 01:33 | 18-08-2011 - 18:55 | |
| CVE-2011-2378 | 10.0 |
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors
|
19-09-2017 - 01:33 | 18-08-2011 - 18:55 | |
| CVE-2011-2984 | 10.0 |
Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges
|
19-09-2017 - 01:33 | 18-08-2011 - 18:55 | |
| CVE-2011-2982 | 10.0 |
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote attackers to cause a denial of service (memory corrupt
|
19-09-2017 - 01:33 | 18-08-2011 - 18:55 | |
| CVE-2011-2983 | 4.3 |
Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data
|
19-09-2017 - 01:33 | 18-08-2011 - 18:55 | |
| CVE-2011-0084 | 10.0 |
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text,
|
19-09-2017 - 01:31 | 18-08-2011 - 18:55 | |
| CVE-2011-2895 | 9.3 |
The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x
|
29-08-2017 - 01:29 | 19-08-2011 - 17:55 | |
| CVE-2011-2752 | 5.8 |
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n (newline) character, a different vulnerability than CVE-2010-4555.
|
29-08-2017 - 01:29 | 17-07-2011 - 20:55 | |
| CVE-2011-2753 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order
|
29-08-2017 - 01:29 | 17-07-2011 - 20:55 | |
| CVE-2010-4555 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) drop-down selection lists, (2) the > (greater than) character in the Squirr
|
17-08-2017 - 01:33 | 14-07-2011 - 23:55 | |
| CVE-2010-4554 | 4.3 |
functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
|
17-08-2017 - 01:33 | 14-07-2011 - 23:55 | |
| CVE-2003-0025 | 7.5 |
Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using ma
|
18-10-2016 - 02:28 | 17-01-2003 - 05:00 | |
| CVE-2011-2023 | 4.3 |
Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message.
|
14-02-2012 - 04:06 | 14-07-2011 - 23:55 | |
| CVE-2011-0226 | 9.3 |
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory
|
26-10-2011 - 02:56 | 19-07-2011 - 22:55 |