Export limit exceeded: 24666 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 29820 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (29820 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2012-0068 | 1 Wireshark | 1 Wireshark | 2025-04-11 | N/A |
| The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell capture file containing a record that is too small. | ||||
| CVE-2011-3711 | 1 Bigace | 1 Bigace | 2025-04-11 | N/A |
| BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/libs/javascript.inc.php and certain other files. | ||||
| CVE-2011-3714 | 1 Csphere | 1 Clansphere | 2025-04-11 | N/A |
| ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php. | ||||
| CVE-2011-3715 | 1 Clantiger | 1 Clantiger | 2025-04-11 | N/A |
| ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/statistics.php and certain other files. | ||||
| CVE-2011-3716 | 1 Claroline | 1 Claroline | 2025-04-11 | N/A |
| Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by work/connector/linker.cnr.php and certain other files. | ||||
| CVE-2011-3726 | 1 Docebo | 1 Docebolms | 2025-04-11 | N/A |
| DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files. | ||||
| CVE-2011-3721 | 1 Concrete5 | 1 Concrete | 2025-04-11 | N/A |
| concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/spellchecker_service.php and certain other files. | ||||
| CVE-2011-3722 | 1 Coppermine-gallery | 1 Coppermine Photo Gallery | 2025-04-11 | N/A |
| Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files. | ||||
| CVE-2011-4092 | 1 Ubuntu Developers | 1 Obby | 2025-04-11 | N/A |
| obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate. | ||||
| CVE-2011-3723 | 1 Craftysyntax | 1 Crafty Syntax | 2025-04-11 | N/A |
| Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by README_FILES/livehelp.php and certain other files. | ||||
| CVE-2011-3724 | 1 Cubecart | 1 Cubecart | 2025-04-11 | N/A |
| CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files. | ||||
| CVE-2011-3725 | 1 Deluxebb | 1 Deluxebb | 2025-04-11 | N/A |
| DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by header_html.php. | ||||
| CVE-2011-3731 | 1 E107 | 1 E107 | 2025-04-11 | N/A |
| e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107_plugins/pdf/e107pdf.php and certain other files. | ||||
| CVE-2011-3732 | 1 Eggblog | 1 Eggblog | 2025-04-11 | N/A |
| eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php and certain other files. | ||||
| CVE-2011-3733 | 1 Elgg | 1 Elgg | 2025-04-11 | N/A |
| Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visual_test.php and certain other files. | ||||
| CVE-2011-3734 | 1 Energine | 1 Energine | 2025-04-11 | N/A |
| Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/SimpleBuilder.class.php and certain other files. | ||||
| CVE-2011-3736 | 1 Exoscripts | 1 Exophpdesk | 2025-04-11 | N/A |
| ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain other files. | ||||
| CVE-2011-3737 | 1 Eyeos | 1 Eyeos | 2025-04-11 | N/A |
| eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SMTP.php and certain other files. | ||||
| CVE-2011-4063 | 1 Asterisk | 1 Open Source | 2025-04-11 | N/A |
| chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request. | ||||
| CVE-2011-3739 | 1 Openfreeway | 1 Freeway | 2025-04-11 | N/A |
| Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/Freeway/boxes/last_product.php and certain other files. | ||||