February 2011

377 results · Feed

• Unscored —
  CVE-2011-0558

  Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array …

  Feb 10, 2011
• Unscored —
  CVE-2011-0581

  Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrar…

  Feb 10, 2011
• Unscored —
  CVE-2011-0035 EPSS 20%

  Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to ex…

  Feb 10, 2011
• Unscored —
  CVE-2011-0578

  Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…

  Feb 10, 2011
• Unscored —
  CVE-2011-0555

  The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code o…

  Feb 10, 2011
• Unscored —
  CVE-2011-0608

  Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory c…

  Feb 10, 2011
• Unscored —
  CVE-2010-4193

  Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to e…

  Feb 10, 2011
• Unscored —
  CVE-2010-4194

  The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, wh…

  Feb 10, 2011
• Unscored —
  CVE-2010-4189

  The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a deni…

  Feb 10, 2011
• Unscored —
  CVE-2010-4192

  Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memor…

  Feb 10, 2011
• Unscored —
  CVE-2010-4190

  Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memor…

  Feb 10, 2011
• Unscored —
  CVE-2010-4196

  The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input …

  Feb 10, 2011
• Unscored —
  CVE-2010-4188

  The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a…

  Feb 10, 2011
• Unscored —
  CVE-2010-4191

  Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memor…

  Feb 10, 2011
• Unscored —
  CVE-2010-4187

  Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memor…

  Feb 10, 2011
• Unscored —
  CVE-2010-4306

  Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memor…

  Feb 10, 2011
• Unscored —
  CVE-2010-4307

  Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified …

  Feb 10, 2011
• Unscored —
  CVE-2010-4093

  Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memor…

  Feb 10, 2011
• Unscored —
  CVE-2010-4195

  The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, whic…

  Feb 10, 2011
• Unscored —
  CVE-2010-2587

  The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a…

  Feb 10, 2011
• Unscored —
  CVE-2010-2589

  Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbit…

  Feb 10, 2011
• Unscored —
  CVE-2010-2588

  The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a…

  Feb 10, 2011
• Unscored —
  CVE-2011-0086

  win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  Feb 9, 2011
• Unscored —
  CVE-2011-0031 EPSS 17%

  The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not pro…

  Feb 9, 2011
• Unscored —
  CVE-2011-0922 Public exploit EPSS 64%

  The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that re…

  Feb 9, 2011
• Unscored —
  CVE-2011-0090

  win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  Feb 9, 2011
• Unscored —
  CVE-2011-0040 EPSS 23%

  The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a se…

  Feb 9, 2011
• Unscored —
  CVE-2011-0088

  win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  Feb 9, 2011
• Unscored —
  CVE-2011-0921 EPSS 11%

  crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associate…

  Feb 9, 2011
• Unscored —
  CVE-2011-0924

  The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allow…

  Feb 9, 2011
• Unscored —
  CVE-2011-0039

  The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not…

  Feb 9, 2011
• Unscored —
  CVE-2011-0923 Public exploit EPSS 81%

  The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute…

  Feb 9, 2011
• Unscored —
  CVE-2011-0087

  win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Serv…

  Feb 9, 2011
• Unscored —
  CVE-2011-0089

  win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  Feb 9, 2011
• Unscored —
  CVE-2011-0030

  The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly …

  Feb 9, 2011
• Unscored —
  CVE-2011-0045 Public exploit

  The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, whi…

  Feb 9, 2011
• Unscored —
  CVE-2011-0277

  Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to…

  Feb 9, 2011
• Unscored —
  CVE-2011-0886 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Busi…

  Feb 8, 2011
• Unscored —
  CVE-2011-0538 Public exploit

  Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .p…

  wireshark Debian
  Feb 8, 2011
• Unscored —
  CVE-2011-0913

  Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 al…

  Feb 8, 2011