2 February 2011

25 results · Feed

• Unscored —
  CVE-2011-0757

  IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the D…

  Feb 2, 2011
• Unscored —
  CVE-2011-0521

  The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check t…

  Feb 2, 2011
• Unscored —
  CVE-2010-3042

  Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB b…

  Feb 2, 2011
• Unscored —
  CVE-2010-3044

  Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB b…

  Feb 2, 2011
• Unscored —
  CVE-2010-3041

  Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB b…

  Feb 2, 2011
• Unscored —
  CVE-2010-3269 EPSS 11%

  Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Pla…

  Feb 2, 2011
• Unscored —
  CVE-2010-3043

  Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB b…

  Feb 2, 2011
• Unscored —
  CVE-2010-3270

  Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assis…

  Feb 2, 2011
• Unscored —
  CVE-2011-0755

  Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to pr…

  Feb 2, 2011
• Unscored —
  CVE-2011-0752

  The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLO…

  Feb 2, 2011
• Unscored —
  CVE-2011-0754

  The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not p…

  Feb 2, 2011
• Unscored —
  CVE-2011-0753

  Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow conte…

  Feb 2, 2011
• Unscored —
  CVE-2011-0017

  The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid s…

  exim4 Debian
  Feb 2, 2011
• Unscored —
  CVE-2011-0742

  Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary…

  Feb 2, 2011
• Unscored —
  CVE-2011-0740 Public exploit

  Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress all…

  Feb 2, 2011
• Unscored —
  CVE-2011-0741

  Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arb…

  Feb 2, 2011
• Unscored —
  CVE-2011-0276 Public exploit EPSS 82%

  HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.sec…

  Feb 2, 2011
• Medium —
  CVE-2011-0739

  Mail Improper Input Validation vulnerability

  The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.

  mail RubyGems
  Feb 2, 2011
• Unscored —
  CVE-2011-0738

  MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2…

  Feb 2, 2011
• Unscored —
  CVE-2010-4652 EPSS 11%

  Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql…

  proftpd-dfsg Debian
  Feb 2, 2011
• Unscored —
  CVE-2010-4015

  Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0…

  Feb 2, 2011
• Unscored —
  CVE-2010-3854

  Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0…

  Feb 2, 2011
• Unscored —
  CVE-2010-3719 EPSS 13%

  Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and…

  Feb 2, 2011
• Unscored —
  CVE-2010-3929

  SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL comman…

  Feb 2, 2011
• Unscored —
  CVE-2010-3930

  Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files v…

  Feb 2, 2011