Skip to content
OpenAdvisories

Archive

February 2011

Vulnerabilities first published in this month (UTC), newest first.

← January 2011 2011 / February March 2011 →
  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-2011-1029

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users t…

  • Critical 9.1
    CVE-2011-0698

    Directory traversal in Django

    Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.

    django PyPI
  • Unscored —
    CVE-2011-0702

    The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files v…

    feh Debian
  • Medium —
    CVE-2011-0447

    actionpack Cross-Site Request Forgery vulnerability

    Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via fo…

    rails actionpack Debian RubyGems
  • Medium 6.1
    CVE-2011-0697

    Cross-site scripting in django

    Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.

    python-django django Debian PyPI
  • High 7.5
    CVE-2011-0696

    Cross-site request forgery in Django

    Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that le…

    python-django django Debian PyPI
  • Medium —
    CVE-2011-0446

    Rails actionpack gem vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email…

    rails actionpack actionview Debian RubyGems
  • Unscored —
    CVE-2011-0983

    Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a den…

  • Unscored —
    CVE-2011-0977 EPSS 32%

    Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac…

  • Unscored —
    CVE-2011-0982

    Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or…

  • Unscored —
    CVE-2011-0984

    Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2011-0979 EPSS 27%

    Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Conve…

  • Unscored —
    CVE-2011-0981

    Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers …

  • Unscored —
    CVE-2011-0985

    Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspeci…

  • Unscored —
    CVE-2011-0976 EPSS 25%

    Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for…

  • Unscored —
    CVE-2011-0978 Public exploit EPSS 43%

    Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2;…

  • Unscored —
    CVE-2011-0980 EPSS 26%

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not …

  • Unscored —
    CVE-2011-0605

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allow attackers to exec…

  • Unscored —
    CVE-2011-0567 EPSS 40%

    AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac …

  • Unscored —
    CVE-2011-0599

    The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x befo…

  • Unscored —
    CVE-2011-0588

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.…

  • Unscored —
    CVE-2011-0566

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0593 EPSS 50%

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0590

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0606

    Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x befor…

  • Unscored —
    CVE-2011-0570

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.…

  • Unscored —
    CVE-2011-0589

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attac…

  • Unscored —
    CVE-2011-0603

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0602

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0758

    The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attac…

  • Unscored —
    CVE-2011-0604

    Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x befo…

  • Unscored —
    CVE-2011-0281

    The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an…

    krb5 Debian
  • Unscored —
    CVE-2011-0565

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Win…

  • Unscored —
    CVE-2011-0564

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for…

  • Unscored —
    CVE-2011-0591 EPSS 48%

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0587

    Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x befo…

  • Unscored —
    CVE-2011-0592 EPSS 48%

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…

  • Unscored —
    CVE-2011-0568

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac…

  • Unscored —
    CVE-2011-0975

    Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Ass…

  • Unscored —
    CVE-2011-0595

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot…