Skip to content
OpenAdvisories

Archive

7 January 2011

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122

56 results · Feed

  • Unscored —
    CVE-2011-0347 EPSS 22%

    Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecif…

  • High 8.1
    CVE-2011-0346 EPSS 31%

    Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 …

  • Unscored —

    ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an a…

  • Unscored —

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) a…

  • Unscored —

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL b…

  • Unscored —

    Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices…

  • Unscored —

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows remote authenticated use…

  • Unscored —

    The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software be…

  • Unscored —

    Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attacke…

  • Unscored —

    Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availabilit…

  • Unscored —
    CVE-2010-3201 Public exploit

    Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary we…

  • Unscored —

    Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin i…

  • Unscored —
    CVE-2010-4543 Public exploit EPSS 16%

    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2…

  • Unscored —

    Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers t…

  • Unscored —

    Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plug…

  • Unscored —

    Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EF…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning M…

  • Unscored —

    Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote…

  • Unscored —

    Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of servi…

  • Unscored —

    Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Info…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative In…

  • Unscored —

    The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion …

  • Unscored —

    Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a deni…

  • Unscored —
    CVE-2010-4538 Public exploit EPSS 29%

    Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote …

  • Unscored —

    CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate …

  • Unscored —

    Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumptio…

  • Unscored —

    Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manag…

  • Unscored —

    STCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not properly handle multiple ca…

  • Unscored —

    Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information …

  • Unscored —
    CVE-2010-3856 Public exploit EPSS 12%

    ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use…

  • Unscored —
    CVE-2010-3847 Public exploit EPSS 10%

    elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pr…

  • Unscored —

    Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  • Unscored —

    Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  • Unscored —
    CVE-2010-2642 EPSS 14%

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t…

  • Unscored —

    Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  • Unscored —

    Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows …

  • Unscored —

    CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service …

  • Unscored —

    Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, …

  • Unscored —

    The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote atta…