Skip to content
OpenAdvisories

Archive

21 February 2011

Vulnerabilities first published on this day (UTC), newest first.

← January 2011 2011 / February /21 March 2011 →
  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2011-1056

    The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasplo…

  • Unscored —
    CVE-2011-1048 Public exploit

    SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2011-1049

    Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers t…

  • Unscored —
    CVE-2011-1050

    Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson o…

  • Unscored —
    CVE-2011-1047 Public exploit

    Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress a…

  • Unscored —
    CVE-2011-1053

    Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote a…

  • Unscored —
    CVE-2011-1055 Public exploit

    SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2011-1052

    Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vecto…

  • Unscored —
    CVE-2011-1054

    Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack ve…

  • Unscored —
    CVE-2011-1051

    Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and att…

  • Unscored —
    CVE-2010-4745

    Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2011-0330

    The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of …

  • Unscored —
    CVE-2011-0329

    Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSyste…

  • High —
    CVE-2011-0449

    actionpack allows remote attackers to bypass intended access restrictions

    actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass inten…

    actionpack RubyGems
  • Unscored —
    CVE-2011-0694

    RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through …

  • Unscored —
    CVE-2011-1045

    Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM)…

  • Unscored —
    CVE-2011-1046

    IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8…

  • High —
    CVE-2011-0448

    activerecord vulnerable to SQL Injection

    Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.

    activerecord RubyGems