Skip to content
OpenAdvisories

Archive

February 2011

Vulnerabilities first published in this month (UTC), newest first.

← January 2011 2011 / February March 2011 →
  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    CVE-2011-0449

    actionpack allows remote attackers to bypass intended access restrictions

    actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass inten…

    actionpack RubyGems
  • High —
    CVE-2011-0448

    activerecord vulnerable to SQL Injection

    Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.

    activerecord RubyGems
  • High 7.5
    CVE-2011-0696

    Cross-site request forgery in Django

    Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that le…

    python-django django Debian PyPI
  • High 7.5
    CVE-2011-0539

    The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t …

    openssh Debian
  • High 7.5
    CVE-2011-0534

    Apache Tomcat does not enforce the maxHttpHeaderSize limit

    Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.

    org.apache.tomcat:tomcat Maven