Archive
March 2011
Vulnerabilities first published in this month (UTC), newest first.
355 results · Feed
-
Unscored —
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, all…
-
Unscored —CVE-2011-1552 EPSS 10%
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations…
-
Unscored —
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote a…
-
Unscored —
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symli…
-
Unscored —
The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Serve…
-
Unscored —CVE-2011-0764 EPSS 13%
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunct…
-
Unscored —
manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows r…
-
Unscored —
tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x be…
-
Unscored —CVE-2010-3695 Public exploit
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail E…
-
Unscored —
Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to rea…
-
Unscored —
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause …
-
Unscored —
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that pe…
-
Unscored —
SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which …
-
Unscored —
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories th…
-
Unscored —
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers t…
-
Unscored —
The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execut…
-
Unscored —
The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit…
-
Unscored —
ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225 allows remote attackers to …
-
Unscored —
The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink…
-
Low —
Loggerhead XSS via filename
Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.
-
Unscored —
Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational C…
-
Unscored —
The Nokia E75 phone with firmware before 211.12.01 allows physically proximate attackers to bypass the Device Lock code…
-
Unscored —
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 f…
-
Unscored —
bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_P…
-
Unscored —CVE-2010-1674 EPSS 13%
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NU…
-
Unscored —CVE-2011-1524 Public exploit
Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) be…
-
Unscored —
Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of ser…
-
Unscored —
Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gai…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attac…
-
Unscored —CVE-2011-0545 Public exploit
Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 all…
-
Unscored —
EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified fi…
-
Unscored —
Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allow…
-
Unscored —
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a…
-
Unscored —
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a…
-
Unscored —
Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows r…
-
Unscored —
WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node paren…
-
Unscored —
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denia…