Total
6174 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-0697 | 1 Hp | 1 Storageworks P2000 G3 Msa | 2017-08-29 | 10.0 HIGH | N/A |
HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788. | |||||
CVE-2012-0186 | 1 Ibm | 1 Lotus Expeditor | 2017-08-29 | 4.3 MEDIUM | N/A |
Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL. | |||||
CVE-2011-5219 | 1 Mpdf1 | 1 Mpdf | 2017-08-29 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. | |||||
CVE-2011-5217 | 1 Hitachi | 2 Jp1\/serverconductor\/deploymentmanager, Serverconductor\/deploymentmanager | 2017-08-29 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors. | |||||
CVE-2011-5210 | 1 Limny | 1 Limny | 2017-08-29 | 6.8 MEDIUM | N/A |
Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the theme parameter. | |||||
CVE-2011-5141 | 1 Obm | 1 Open Business Management | 2017-08-29 | 6.0 MEDIUM | N/A |
Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action. | |||||
CVE-2011-5028 | 1 Novell | 1 Sentinel Log Manager | 2017-08-29 | 4.0 MEDIUM | N/A |
Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter. | |||||
CVE-2011-4878 | 1 Siemens | 5 Simatic Hmi Panels, Wincc, Wincc Flexible and 2 more | 2017-08-29 | 7.8 HIGH | N/A |
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI. | |||||
CVE-2011-4876 | 1 Siemens | 5 Simatic Hmi Panels, Wincc, Wincc Flexible and 2 more | 2017-08-29 | 9.3 HIGH | N/A |
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string. | |||||
CVE-2011-4832 | 1 Caupo | 2 Cauposhop Classic, Cauposhop Pro | 2017-08-29 | 7.5 HIGH | N/A |
Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter in a template action. | |||||
CVE-2011-4722 | 1 Ipswitch | 1 Tftp Server | 2017-08-29 | 7.8 HIGH | N/A |
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation. | |||||
CVE-2011-4715 | 1 Koha | 2 Koha, Liblime Koha | 2017-08-29 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm. | |||||
CVE-2011-4714 | 1 Vvertex | 1 Muster | 2017-08-29 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files via a \.. (backslash dot dot) in the URL. | |||||
CVE-2011-4711 | 1 Namazu | 1 Namazu | 2017-08-29 | 5.0 MEDIUM | N/A |
Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter. | |||||
CVE-2011-4696 | 1 Eye | 1 Eye-fi Helper | 2017-08-29 | 4.3 MEDIUM | N/A |
Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request. | |||||
CVE-2011-4643 | 1 Splunk | 1 Splunk | 2017-08-29 | 4.0 MEDIUM | N/A |
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243. | |||||
CVE-2011-4122 | 1 Freebsd | 1 Freebsd | 2017-08-29 | 6.9 MEDIUM | N/A |
Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a .. (dot dot) in the service_name argument to the pam_start function, as demonstrated by a .. in the -c option to kcheckpass. | |||||
CVE-2011-3837 | 1 Wuzly | 1 Wuzly | 2017-08-29 | 6.8 MEDIUM | N/A |
Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the preview parameter to index.php. | |||||
CVE-2011-3305 | 1 Cisco | 2 Nac Appliance, Nac Manager | 2017-08-29 | 7.8 HIGH | N/A |
Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755. | |||||
CVE-2011-3229 | 1 Apple | 1 Safari | 2017-08-29 | 6.8 MEDIUM | N/A |
Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL. |