Skip to content
OpenAdvisories

Archive

14 February 2011

Vulnerabilities first published on this day (UTC), newest first.

← January 2011 2011 / February /14 March 2011 →
  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2011-1033

    Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arb…

  • Unscored —
    CVE-2011-1032

    IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to…

  • Unscored —
    CVE-2008-7274

    IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perfo…

  • Unscored —
    CVE-2010-4731

    Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU -…

  • Unscored —
    CVE-2010-4733

    WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the I…

  • Unscored —
    CVE-2010-4730

    Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP…

  • Unscored —
    CVE-2010-4732

    cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet S…

  • Medium —
    CVE-2011-0986

    phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file

    phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent fi…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-0987

    The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3…

    phpmyadmin Debian
  • Unscored —
    CVE-2011-1031

    The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files…

    feh Debian
  • Unscored —
    CVE-2011-1030

    Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to…

  • Unscored —
    CVE-2011-1029

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users t…

  • Critical 9.1
    CVE-2011-0698

    Directory traversal in Django

    Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.

    django PyPI
  • Unscored —
    CVE-2011-0702

    The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files v…

    feh Debian
  • Medium —
    CVE-2011-0447

    actionpack Cross-Site Request Forgery vulnerability

    Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via fo…

    rails actionpack Debian RubyGems
  • Medium 6.1
    CVE-2011-0697

    Cross-site scripting in django

    Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.

    python-django django Debian PyPI
  • High 7.5
    CVE-2011-0696

    Cross-site request forgery in Django

    Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that le…

    python-django django Debian PyPI
  • Medium —
    CVE-2011-0446

    Rails actionpack gem vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email…

    rails actionpack actionview Debian RubyGems