Skip to content
OpenAdvisories

Archive

25 January 2011

Vulnerabilities first published on this day (UTC), newest first.

← December 2010 2011 / January /25 February 2011 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2011-0643 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows…

  • Unscored —
    CVE-2011-0009

    Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, whi…

  • Unscored —
    CVE-2011-0645 Public exploit

    SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2011-0641

    Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress…

  • Unscored —
    CVE-2011-0021

    Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote…

    vlc Debian
  • Unscored —
    CVE-2011-0644 Public exploit

    SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute…

  • Unscored —
    CVE-2011-0646 Public exploit

    SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2011-0642 Public exploit

    Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attacker…

  • Unscored —
    CVE-2010-4256

    The pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly determine whether a file is a …

  • Unscored —
    CVE-2011-0638

    Microsoft Windows does not properly warn the user before enabling additional Human Interface Device (HID) functionality…

  • Unscored —
    CVE-2011-0640

    The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HI…

  • Unscored —
    CVE-2011-0637

    The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which…

  • Unscored —
    CVE-2011-0639

    Apple Mac OS X does not properly warn the user before enabling additional Human Interface Device (HID) functionality ov…

  • Unscored —
    CVE-2011-0273 EPSS 13%

    Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-4353

    Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows…

  • Unscored —
    CVE-2010-4255

    The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization…

    xen Debian
  • Unscored —
    CVE-2010-4341

    The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 …

    sssd Debian