Skip to content
OpenAdvisories

Archive

10 January 2011

Vulnerabilities first published on this day (UTC), newest first.

← December 2010 2011 / January /10 February 2011 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Unscored —
    CVE-2011-0398

    The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows re…

  • Unscored —
    CVE-2011-0401

    Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attac…

  • Unscored —
    CVE-2011-0400

    Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it …

  • Unscored —
    CVE-2011-0399

    Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which …

  • Unscored —
    CVE-2011-0004

    Multiple cross-site scripting (XSS) vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web …

  • Medium 6.5
    CVE-2010-4534

    Improper query string handling in Django

    The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obt…

    python-django django Debian PyPI
  • Unscored —
    CVE-2010-4013

    Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to …

  • High 7.5
    CVE-2010-4535

    Improper date handling in Django

    The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of servic…

    python-django django Debian PyPI