Skip to content
OpenAdvisories

Archive

January 2011

Vulnerabilities first published in this month (UTC), newest first.

← December 2010 2011 / January February 2011 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 756
  8. 8 
  9. 9 
  10. 108
  11. 1128
  12. 1214
  13. 1321
  14. 1434
  15. 15 
  16. 16 
  17. 17 
  18. 1819
  19. 1969
  20. 2037
  21. 21 
  22. 228
  23. 23 
  24. 2413
  25. 2517
  26. 26 
  27. 27 
  28. 2834
  29. 29 
  30. 30 
  31. 3122
All Critical High Medium Low Exploited only Public exploit

396 results · Feed

  • Unscored —
    CVE-2011-0315

    Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application S…

  • Unscored —
    CVE-2011-0314

    Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated u…

  • Unscored —
    CVE-2011-0027 Public exploit EPSS 54%

    Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not proper…

  • Unscored —
    CVE-2011-0026 EPSS 34%

    Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (M…

  • Unscored —
    CVE-2011-0316

    The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0…

  • Unscored —
    CVE-2011-0423

    The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which…

  • Unscored —
    CVE-2010-0214

    The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Director…

  • Unscored —
    CVE-2010-3926

    Multiple cross-site scripting (XSS) vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before…

  • Unscored —
    CVE-2010-3683 Public exploit EPSS 12%

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL er…

  • Unscored —
    CVE-2010-3682 Public exploit EPSS 11%

    Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (my…

  • Unscored —
    CVE-2010-3681 Public exploit EPSS 12%

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mys…

  • Unscored —
    CVE-2010-3679 Public exploit EPSS 12%

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via…

  • Unscored —
    CVE-2010-3677

    Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (my…

  • Unscored —
    CVE-2010-3676 Public exploit

    storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to caus…

  • Unscored —
    CVE-2010-3680 Public exploit EPSS 12%

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by …

  • Unscored —
    CVE-2010-3678 Public exploit EPSS 12%

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2)…

  • Unscored —
    CVE-2011-0007

    pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink at…

    pimd Debian
  • Unscored —
    CVE-2011-0003

    MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjackin…

    mediawiki Debian
  • Unscored —
    CVE-2011-0406 Public exploit EPSS 21%

    Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2011-0407 Public exploit

    SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype…

  • Unscored —
    CVE-2011-0005 Public exploit

    Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attack…

    Web / CMS
  • Unscored —
    CVE-2011-0405 Public exploit

    Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc …

  • Unscored —
    CVE-2011-0404 Public exploit EPSS 65%

    Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allow…

  • Unscored —
    CVE-2011-0403 Public exploit

    Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, …

  • Unscored —
    CVE-2011-0402

    dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a sym…

    dpkg Debian
  • Unscored —
    CVE-2010-1679

    Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attacker…

    dpkg Debian
  • Unscored —
    CVE-2010-4225

    Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain t…

    mono Debian
  • Unscored —
    CVE-2010-4242

    The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and p…

  • Unscored —
    CVE-2010-4175

    Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause…

  • Unscored —
    CVE-2010-4525

    Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows …

  • Unscored —
    CVE-2010-4645 Public exploit EPSS 15%

    strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows…

  • Unscored —
    CVE-2010-4247

    The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.…

  • Unscored —
    CVE-2010-4526

    Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.3…

  • Unscored —
    CVE-2010-4693 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attacke…

  • Unscored —
    CVE-2010-3865

    Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a den…

  • Unscored —
    CVE-2010-3444

    Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions,…

    pyfribidi Debian
  • Unscored —
    CVE-2011-0398

    The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows re…

  • Unscored —
    CVE-2011-0401

    Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attac…

  • Unscored —
    CVE-2011-0400

    Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it …

  • Unscored —
    CVE-2011-0399

    Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which …