Skip to content
OpenAdvisories

Archive

11 March 2011

Vulnerabilities first published on this day (UTC), newest first.

  1. 134
  2. 216
  3. 362
  4. 42
  5. 5 
  6. 6 
  7. 77
  8. 819
  9. 96
  10. 104
  11. 1142
  12. 12 
  13. 13 
  14. 147
  15. 1511
  16. 1614
  17. 17 
  18. 1825
  19. 19 
  20. 2015
  21. 21 
  22. 2216
  23. 2328
  24. 24 
  25. 2510
  26. 26 
  27. 27 
  28. 2811
  29. 298
  30. 309
  31. 319

42 results · Feed

  • Unscored —

    WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with…

  • Unscored —

    WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, whic…

  • Unscored —

    MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allo…

  • Unscored —

    WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspe…

  • Unscored —

    WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —

    The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to b…

  • Unscored —

    WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources…

  • Unscored —

    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote att…

  • Unscored —

    Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which…

  • Unscored —

    The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies d…

  • Unscored —
    CVE-2011-0167 Public exploit

    The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Poli…

  • Unscored —

    The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS be…

  • Unscored —

    Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to cre…

  • Unscored —

    Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in G…

  • Unscored —

    webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary comman…

  • Unscored —

    Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4…

  • Unscored —
    CVE-2011-1137 Public exploit EPSS 28%

    Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a den…

  • Unscored —

    The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of mem…

  • Unscored —
    CVE-2010-3609 Public exploit EPSS 17%

    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Servi…

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote attackers to cause a d…

  • Unscored —

    Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, wh…

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a de…

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial…

  • Unscored —

    Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to ca…

  • Unscored —

    The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which…

  • Unscored —

    The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a …

  • Unscored —

    Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possib…

  • Unscored —

    The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or po…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service …

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial …

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, wh…

  • Unscored —

    Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, rel…

  • Unscored —

    Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via u…

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a deni…

  • Unscored —

    The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of serv…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service …

  • Unscored —

    The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin P…

  • Unscored —

    Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows …

  • Unscored —

    Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a san…

  • Unscored —

    Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial…