Skip to content
OpenAdvisories

Archive

January 2011

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122

396 results · Feed

  • Unscored —

    Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to con…

  • Unscored —

    Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10…

  • Unscored —

    Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause …

  • Unscored —

    The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account password…

  • Unscored —
    CVE-2011-0413 EPSS 33%

    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before …

  • Unscored —

    Opera before 11.01 does not properly implement Wireless Application Protocol (WAP) dropdown lists, which allows user-as…

  • Unscored —

    The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript…

  • Unscored —

    Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service (application crash…

  • Unscored —

    Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web …

  • Unscored —
    CVE-2010-0111 Public exploit EPSS 35%

    HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (…

  • Unscored —

    Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus…

  • Unscored —

    Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and Re…

  • Unscored —

    data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage…

  • Medium 6.1
    CVE-2011-0096 Public exploit EPSS 47%

    The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Win…

  • Unscored —

    The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewi…

  • Unscored —
    CVE-2010-4717 Public exploit

    Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWi…

  • Unscored —

    Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary cod…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote …

  • Unscored —

    Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP …

  • Unscored —
    CVE-2010-4715 Public exploit EPSS 28%

    Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Nov…

  • Unscored —

    Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote…

  • Unscored —
    CVE-2010-4711 Public exploit EPSS 14%

    Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Gener…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Gener…

  • Unscored —

    Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(…

  • Unscored —
    CVE-2010-4643 EPSS 10%

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a…

  • Unscored —
    CVE-2010-4253 EPSS 10%

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a…

  • Unscored —
    CVE-2010-3450 EPSS 11%

    Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to o…

  • Unscored —
    CVE-2010-3451 EPSS 10%

    Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to caus…

  • Unscored —

    soffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows…

  • Unscored —
    CVE-2010-3454 EPSS 10%

    Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.…

  • Unscored —

    The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properl…

  • Unscored —
    CVE-2010-3452 EPSS 10%

    Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to caus…

  • Unscored —
    CVE-2010-2777 Public exploit EPSS 10%

    Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x bef…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.…

  • Unscored —

    Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to cause a …

  • Unscored —

    IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr fo…

  • Unscored —
    CVE-2011-0678 Public exploit

    Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attack…

  • Unscored —

    Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attac…