2011

CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev

CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php fil

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea

ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev

cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct r

ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re

AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .p

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .p

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which r

Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which

The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from o

Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier a

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thr

crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easi

SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to e

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solar

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10

Cross-site scripting (XSS) vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attacker

Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote attackers to inject arbitrary

Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to in

Multiple cross-site scripting (XSS) vulnerabilities in config_defaults_inc.php in MantisBT before 1.2.8 allow remote att

Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attac

Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to

Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remot

Unspecified vulnerability in HP Business Service Automation (BSA) Essentials 2.01 allows remote attackers to execute arb

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentic

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6

Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed ca

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain pr