Skip to content
OpenAdvisories

Archive

20 January 2011

Vulnerabilities first published on this day (UTC), newest first.

← December 2010 2011 / January /20 February 2011 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122
All Critical High Medium Low Exploited only Public exploit

37 results · Feed

  • Unscored —
    CVE-2010-2743 Public exploit EPSS 15%

    The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during…

  • Unscored —
    CVE-2011-0499 Public exploit EPSS 31%

    Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly oth…

  • Unscored —
    CVE-2011-0509

    Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2011-0503 Public exploit

    Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote att…

  • Unscored —
    CVE-2011-0495

    Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4…

    asterisk Debian
  • Unscored —
    CVE-2011-0504 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote a…

  • Unscored —
    CVE-2011-0512 Public exploit

    SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to exe…

  • Unscored —
    CVE-2011-0498 Public exploit

    Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted …

  • Unscored —
    CVE-2011-0500 Public exploit EPSS 31%

    Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions…

  • Unscored —
    CVE-2011-0515 Public exploit

    KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (…

  • Unscored —
    CVE-2011-0508

    Cross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2.9.2, and possibly othe…

  • Unscored —
    CVE-2011-0506 Public exploit

    Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attacker…

  • Unscored —
    CVE-2011-0510 Public exploit

    SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows rem…

  • Unscored —
    CVE-2011-0501 Public exploit EPSS 16%

    Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions al…

  • Unscored —
    CVE-2011-0516 Public exploit

    SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers t…

  • Unscored —
    CVE-2011-0502 Public exploit

    Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attac…

  • Unscored —
    CVE-2011-0496

    Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messag…

  • Unscored —
    CVE-2011-0505 Public exploit

    Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_gl…

  • Unscored —
    CVE-2011-0514 Public exploit EPSS 49%

    The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash…

  • Unscored —
    CVE-2011-0513 Public exploit

    DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2011-0518 Public exploit EPSS 16%

    Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, all…

  • Unscored —
    CVE-2011-0507 Public exploit

    FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.17…

  • Unscored —
    CVE-2011-0519 Public exploit

    SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allow…

  • Unscored —
    CVE-2011-0517 Public exploit EPSS 40%

    Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows…

  • Unscored —
    CVE-2011-0008

    A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system grou…

  • Unscored —
    CVE-2011-0511 Public exploit

    SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to e…

  • Unscored —
    CVE-2011-0497

    Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messag…

  • Unscored —
    CVE-2010-4702

    SQL injection vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to execut…

  • Unscored —
    CVE-2010-4701 Public exploit EPSS 48%

    Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover…

  • Unscored —
    CVE-2010-4267 EPSS 11%

    Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printi…

    hplip Debian
  • Unscored —
    CVE-2010-4331 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2010-4703

    SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary…

  • Medium —
    CVE-2010-4338

    ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack

    ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.

    ocrodjvu PyPI
  • Unscored —
    CVE-2010-4071

    Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allow…

    otrs2 Debian
  • Unscored —
    CVE-2010-4351

    The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java Open…

  • Unscored —
    CVE-2010-3928

    Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters,…

  • Unscored —
    CVE-2010-3931

    Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P …