Skip to content
OpenAdvisories

Archive

January 2011

Vulnerabilities first published in this month (UTC), newest first.

← December 2010 2011 / January February 2011 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Unscored —
    CVE-2010-0111 Public exploit EPSS 35%

    HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (…

  • Medium 6.1
    CVE-2011-0096 Public exploit EPSS 47%

    The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Win…

  • Unscored —
    CVE-2010-4717 Public exploit

    Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWi…

  • Unscored —
    CVE-2010-4715 Public exploit EPSS 28%

    Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Nov…

  • Unscored —
    CVE-2010-4711 Public exploit EPSS 14%

    Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.…

  • Unscored —
    CVE-2010-2777 Public exploit EPSS 10%

    Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x bef…

  • Unscored —
    CVE-2011-0678 Public exploit

    Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attack…

  • Unscored —
    CVE-2011-0018 Public exploit

    The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authen…

  • Unscored —
    CVE-2011-0652 Public exploit

    lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (cra…

  • Unscored —
    CVE-2010-4709 Public exploit EPSS 16%

    Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to …

  • Unscored —
    CVE-2011-0643 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows…

  • Unscored —
    CVE-2011-0645 Public exploit

    SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2011-0644 Public exploit

    SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute…

  • Unscored —
    CVE-2011-0646 Public exploit

    SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2011-0642 Public exploit

    Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attacker…

  • Unscored —
    CVE-2011-0020 Public exploit EPSS 19%

    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pa…

    pango1.0 Debian
  • Unscored —
    CVE-2011-0635 Public exploit

    Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitr…

  • Unscored —
    CVE-2010-4243 Public exploit

    fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repr…

  • Unscored —
    CVE-2010-3879 Public exploit

    FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently …

    fuse Debian
  • Unscored —
    CVE-2010-2743 Public exploit EPSS 15%

    The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during…

  • Unscored —
    CVE-2011-0499 Public exploit EPSS 31%

    Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly oth…

  • Unscored —
    CVE-2011-0503 Public exploit

    Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote att…

  • Unscored —
    CVE-2011-0504 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote a…

  • Unscored —
    CVE-2011-0512 Public exploit

    SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to exe…

  • Unscored —
    CVE-2011-0498 Public exploit

    Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted …

  • Unscored —
    CVE-2011-0500 Public exploit EPSS 31%

    Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions…

  • Unscored —
    CVE-2011-0515 Public exploit

    KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (…

  • Unscored —
    CVE-2011-0506 Public exploit

    Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attacker…

  • Unscored —
    CVE-2011-0510 Public exploit

    SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows rem…

  • Unscored —
    CVE-2011-0501 Public exploit EPSS 16%

    Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions al…

  • Unscored —
    CVE-2011-0516 Public exploit

    SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers t…

  • Unscored —
    CVE-2011-0502 Public exploit

    Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attac…

  • Unscored —
    CVE-2011-0505 Public exploit

    Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_gl…

  • Unscored —
    CVE-2011-0514 Public exploit EPSS 49%

    The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash…

  • Unscored —
    CVE-2011-0513 Public exploit

    DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2011-0518 Public exploit EPSS 16%

    Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, all…

  • Unscored —
    CVE-2011-0507 Public exploit

    FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.17…

  • Unscored —
    CVE-2011-0519 Public exploit

    SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allow…

  • Unscored —
    CVE-2011-0517 Public exploit EPSS 40%

    Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows…

  • Unscored —
    CVE-2011-0511 Public exploit

    SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to e…