Archive
January 2011
Vulnerabilities first published in this month (UTC), newest first.
396 results · Feed
-
Unscored —
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intend…
-
Unscored —
The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings th…
-
Unscored —
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent at…
-
Unscored —
The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly inte…
-
Unscored —
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-depende…
-
Unscored —CVE-2011-0272 EPSS 13%
Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic t…
-
Unscored —
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advan…
-
Unscored —
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allo…
-
Unscored —
pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or pos…
-
Unscored —
ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code v…
-
Unscored —
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command executi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web scri…
-
Unscored —
The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Lin…
-
Unscored —
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcs…
-
Unscored —
Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd …
-
Unscored —
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL c…
-
Unscored —
Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier f…
-
Unscored —
SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 all…
-
Unscored —
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 an…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tm…
-
High —
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by t…
-
Unscored —
include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows loc…
-
Unscored —
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows …
-
Unscored —
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of…
-
Unscored —
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of…
-
Unscored —
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of…
-
Unscored —
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticat…
-
Unscored —
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated us…
-
Unscored —
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite l…
-
Unscored —
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld ser…
-
Unscored —
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of …
-
Unscored —
A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12…
-
Unscored —
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified vari…
-
Unscored —
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents,…
-
Unscored —
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allow…
-
Unscored —
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows…
-
Unscored —
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) t…