Skip to content
OpenAdvisories

Archive

February 2011

Vulnerabilities first published in this month (UTC), newest first.

← January 2011 2011 / February March 2011 →
  1. 112
  2. 225
  3. 312
  4. 420
  5. 5 
  6. 6 
  7. 710
  8. 821
  9. 915
  10. 1095
  11. 11 
  12. 12 
  13. 13 
  14. 1418
  15. 15 
  16. 1610
  17. 1726
  18. 1826
  19. 19 
  20. 20 
  21. 2118
  22. 2213
  23. 2310
  24. 242
  25. 2537
  26. 26 
  27. 27 
  28. 287
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-2011-0916

    Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2011-0920 Public exploit EPSS 10%

    The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used,…

  • Unscored —
    CVE-2011-0912

    Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote att…

  • Unscored —
    CVE-2011-0911

    Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject a…

  • Unscored —
    CVE-2011-0885 Public exploit EPSS 10%

    A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default pa…

  • Unscored —
    CVE-2011-0918

    Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute …

  • Unscored —
    CVE-2011-0919

    Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers …

  • Unscored —
    CVE-2011-0914

    Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allow…

  • Unscored —
    CVE-2011-0915 EPSS 12%

    Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2011-0535 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to h…

  • Unscored —
    CVE-2011-0887 Public exploit

    The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses pre…

  • Unscored —
    CVE-2011-0917 Public exploit EPSS 14%

    Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in…

  • Unscored —
    CVE-2010-4728

    Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remot…

  • Unscored —
    CVE-2010-4729

    Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd proce…

  • Unscored —
    CVE-2011-0526

    Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject…

  • Unscored —
    CVE-2011-0909

    Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2011-0908

    Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary we…

  • Unscored —
    CVE-2011-0910

    The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed reques…

  • Unscored —
    CVE-2011-0900 Public exploit

    Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.15…

  • Unscored —
    CVE-2011-0899

    The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaint…

  • Unscored —
    CVE-2011-0323

    Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to exe…

  • Unscored —
    CVE-2011-0901 Public exploit

    Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tscl…

  • Unscored —
    CVE-2011-0324

    Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions bef…

  • Unscored —
    CVE-2011-0531 Public exploit EPSS 42%

    demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to…

    vlc Debian
  • Unscored —
    CVE-2011-0522 Public exploit EPSS 52%

    The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/cod…

    vlc Debian
  • Unscored —
    CVE-2011-0902 Public exploit

    Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 …

  • Unscored —
    CVE-2011-0903 Public exploit

    Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitr…

  • Unscored —
    CVE-2010-4506

    Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute …

  • Unscored —
    CVE-2011-0025

    IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that…

  • Unscored —
    CVE-2011-0780

    The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows…

  • Unscored —
    CVE-2011-0776

    The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potent…

  • Unscored —
    CVE-2011-0782

    Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL lib…

  • Unscored —
    CVE-2011-0783

    Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-0779

    Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers t…

  • Unscored —
    CVE-2011-0777

    Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or…

  • Unscored —
    CVE-2011-0784

    Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related…

  • Unscored —
    CVE-2011-0781

    Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and rem…

  • Unscored —
    CVE-2011-0778

    Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers…

  • Unscored —
    CVE-2011-0047

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to inject arbitrary web scr…

    mediawiki Debian
  • Unscored —
    CVE-2011-0649

    Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 th…