Archive
10 February 2011
Vulnerabilities first published on this day (UTC), newest first.
95 results · Feed
-
Unscored —
Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attac…
-
Unscored —
Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on W…
-
Unscored —
Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Win…
-
Unscored —
Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.…
-
Unscored —
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows …
-
Unscored —CVE-2011-0600 EPSS 40%
The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and…
-
Unscored —
Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows …
-
Unscored —
The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when…
-
Low —
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstr…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2011-0036 EPSS 20%
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —
Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Di…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain…
-
Unscored —CVE-2011-0093 EPSS 20%
ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening …
-
Unscored —CVE-2011-0092 EPSS 24%
The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows r…
-
Unscored —
The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or caus…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitr…
-
Unscored —CVE-2011-0033 EPSS 21%
The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis…
-
Unscored —
Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encrypt…
-
Unscored —
Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local u…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via…
-
Unscored —
Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via …
-
Unscored —
The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or caus…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code vi…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 …
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2011-0038 EPSS 11%
Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a T…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array …
-
Unscored —
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2011-0035 EPSS 20%
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code o…
-
Unscored —
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to e…