February 2011

53 results · Clear filters · Feed

• Unscored —
  CVE-2011-1020 Public exploit

  The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directo…

  Feb 28, 2011
• Unscored —
  CVE-2011-1018 Public exploit EPSS 18%

  logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log f…

  logwatch Debian
  Feb 25, 2011
• Unscored —
  CVE-2010-4227 Public exploit EPSS 17%

  The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of …

  Feb 25, 2011
• Unscored —
  CVE-2011-1100 Public exploit

  Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execut…

  Feb 25, 2011
• Unscored —
  CVE-2011-1062 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attacke…

  Feb 22, 2011
• Unscored —
  CVE-2011-1060 Public exploit

  SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to e…

  Feb 22, 2011
• Unscored —
  CVE-2011-1038 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remot…

  Feb 22, 2011
• Unscored —
  CVE-2011-1048 Public exploit

  SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands…

  Feb 21, 2011
• Unscored —
  CVE-2011-1047 Public exploit

  Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress a…

  Feb 21, 2011
• Unscored —
  CVE-2011-1055 Public exploit

  SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary …

  Feb 21, 2011
• Unscored —
  CVE-2011-0420 Public exploit EPSS 14%

  The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-depende…

  Feb 18, 2011
• Unscored —
  CVE-2011-0364 Public exploit EPSS 20%

  The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attacker…

  Feb 18, 2011
• Unscored —
  CVE-2010-4323 Public exploit

  Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, …

  Feb 18, 2011
• Unscored —
  CVE-2010-4328 Public exploit EPSS 15%

  Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server …

  Feb 18, 2011
• Unscored —
  CVE-2010-4741 Public exploit EPSS 28%

  Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote M…

  Feb 18, 2011
• Unscored —
  CVE-2010-4742 Public exploit EPSS 56%

  Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows …

  Feb 18, 2011
• Medium —
  CVE-2010-4476 Public exploit EPSS 23%

  Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

  The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attac…

  org.apache.tomcat:tomcat Maven
  Feb 17, 2011
• Unscored —
  CVE-2010-4452 Public exploit EPSS 83%

  Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for …

  Feb 17, 2011
• Unscored —
  CVE-2010-3272 Public exploit

  accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Bu…

  Feb 17, 2011
• Unscored —
  CVE-2010-3274 Public exploit EPSS 21%

  Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEn…

  Feb 17, 2011
• Unscored —
  CVE-2010-4737 Public exploit

  SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary…

  Feb 16, 2011
• Unscored —
  CVE-2010-4734 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin i…

  Feb 16, 2011
• Unscored —
  CVE-2010-4738 Public exploit

  Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote atta…

  Feb 16, 2011
• Unscored —
  CVE-2010-4736 Public exploit

  SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrar…

  Feb 16, 2011
• Unscored —
  CVE-2010-4735 Public exploit

  SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote …

  Feb 16, 2011
• Unscored —
  CVE-2010-4740 Public exploit EPSS 42%

  Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote…

  Feb 16, 2011
• Unscored —
  CVE-2011-0654 Public exploit EPSS 68%

  Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in…

  Feb 16, 2011
• Unscored —
  CVE-2011-0978 Public exploit EPSS 43%

  Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2;…

  Feb 10, 2011
• Unscored —
  CVE-2011-0647 Public exploit EPSS 64%

  The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.…

  Feb 10, 2011
• Unscored —
  CVE-2011-0922 Public exploit EPSS 64%

  The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that re…

  Feb 9, 2011
• Unscored —
  CVE-2011-0923 Public exploit EPSS 81%

  The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute…

  Feb 9, 2011
• Unscored —
  CVE-2011-0045 Public exploit

  The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, whi…

  Feb 9, 2011
• Unscored —
  CVE-2011-0886 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Busi…

  Feb 8, 2011
• Unscored —
  CVE-2011-0538 Public exploit

  Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .p…

  wireshark Debian
  Feb 8, 2011
• Unscored —
  CVE-2011-0920 Public exploit EPSS 10%

  The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used,…

  Feb 8, 2011
• Unscored —
  CVE-2011-0885 Public exploit EPSS 10%

  A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default pa…

  Feb 8, 2011
• Unscored —
  CVE-2011-0535 Public exploit

  Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to h…

  Feb 8, 2011
• Unscored —
  CVE-2011-0887 Public exploit

  The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses pre…

  Feb 8, 2011
• Unscored —
  CVE-2011-0917 Public exploit EPSS 14%

  Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in…

  Feb 8, 2011
• Unscored —
  CVE-2011-0900 Public exploit

  Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.15…

  Feb 7, 2011