Skip to content
OpenAdvisories

Archive

14 March 2011

Vulnerabilities first published on this day (UTC), newest first.

← February 2011 2011 / March /14 April 2011 →
  1. 134
  2. 216
  3. 362
  4. 42
  5. 5 
  6. 6 
  7. 77
  8. 819
  9. 96
  10. 104
  11. 1142
  12. 12 
  13. 13 
  14. 147
  15. 1511
  16. 1614
  17. 17 
  18. 1825
  19. 19 
  20. 2015
  21. 21 
  22. 2216
  23. 2328
  24. 24 
  25. 2510
  26. 26 
  27. 27 
  28. 2811
  29. 298
  30. 309
  31. 319
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 8.1
    CVE-2011-0432

    PyWebDAV SQL Injection vulnerability

    Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) pw argument. NOTE: some of th…

    pywebdav pywebdav Debian PyPI
  • Unscored —
    CVE-2011-0280

    Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers…

  • Unscored —
    CVE-2011-0701

    wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1)…

    wordpress Debian
  • Unscored —
    CVE-2011-0700

    Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to injec…

    wordpress Debian
  • Medium —
    CVE-2011-1419

    Apache Tomcat does not follow ServletSecurity annotations

    Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exist…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2011-1091

    libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated use…

    pidgin Debian
  • Medium —
    CVE-2011-1088

    Apache Tomcat allows remote attackers to bypass intended access restrictions

    Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.

    org.apache.tomcat:tomcat Maven