Skip to content
OpenAdvisories

Archive

February 2011

Vulnerabilities first published in this month (UTC), newest first.

  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287

377 results · Feed

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentic…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script…

  • Unscored —

    The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to…

  • Unscored —
    CVE-2011-1020 Public exploit

    The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directo…

  • Unscored —

    The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve re…

  • Unscored —

    Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scr…

  • Unscored —

    Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physicall…

  • Unscored —

    Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execu…

  • Unscored —

    Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easie…

  • Unscored —

    Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sess…

  • Unscored —

    The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix …

  • Unscored —
    CVE-2011-1018 Public exploit EPSS 18%

    logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log f…

  • Unscored —

    Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, fo…

  • Unscored —
    CVE-2010-4227 Public exploit EPSS 17%

    The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of …

  • Unscored —

    A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature o…

  • Unscored —

    Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Win…

  • Unscored —

    The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Se…

  • Unscored —
    CVE-2011-1100 Public exploit

    Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execut…

  • Unscored —

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authentic…

  • Unscored —

    The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attacke…

  • Unscored —

    Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices…

  • Unscored —

    The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attac…

  • Unscored —

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers…

  • Unscored —

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authentic…

  • Unscored —

    The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco Te…

  • Unscored —

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authentic…

  • Unscored —

    Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently …

  • Unscored —

    Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence…

  • Unscored —

    Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of servi…

  • Unscored —

    The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, an…

  • Unscored —

    Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (th…

  • Unscored —

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2…

  • Unscored —

    The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePrese…

  • Unscored —

    The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 al…

  • Unscored —

    Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers…

  • Unscored —

    Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary me…

  • Unscored —

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), …

  • Unscored —

    The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.…

  • Unscored —

    Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface,…