Archive
February 2011
Vulnerabilities first published in this month (UTC), newest first.
377 results · Feed
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentic…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script…
-
Unscored —
The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to…
-
Unscored —CVE-2011-1020 Public exploit
The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directo…
-
Unscored —
The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve re…
-
Unscored —
Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scr…
-
Unscored —
Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physicall…
-
Unscored —
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execu…
-
Unscored —
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easie…
-
Unscored —
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sess…
-
Unscored —
The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix …
-
Unscored —
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log f…
-
Unscored —
Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, fo…
-
Unscored —
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of …
-
Unscored —
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature o…
-
Unscored —
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Win…
-
Unscored —
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Se…
-
Unscored —CVE-2011-1100 Public exploit
Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execut…
-
Unscored —
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authentic…
-
Unscored —
The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attacke…
-
Unscored —
Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices…
-
Unscored —
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attac…
-
Unscored —
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers…
-
Unscored —
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authentic…
-
Unscored —
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco Te…
-
Unscored —
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authentic…
-
Unscored —
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently …
-
Unscored —
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence…
-
Unscored —
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of servi…
-
Unscored —
The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, an…
-
Unscored —
Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (th…
-
Unscored —
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2…
-
Unscored —
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePrese…
-
Unscored —
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 al…
-
Unscored —
Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers…
-
Unscored —
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary me…
-
Unscored —
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), …
-
Unscored —
The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.…
-
Unscored —
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface,…