Archive
March 2011
Vulnerabilities first published in this month (UTC), newest first.
41 results · Clear filters · Feed
-
Unscored —CVE-2010-3695 Public exploit
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail E…
-
Unscored —CVE-2011-1524 Public exploit
Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) be…
-
Unscored —CVE-2011-0545 Public exploit
Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 all…
-
Unscored —
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a…
-
Unscored —CVE-2011-1519 Public exploit
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located…
-
Unscored —CVE-2010-4770 Public exploit
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbi…
-
Unscored —CVE-2010-4769 Public exploit
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read …
-
Unscored —CVE-2010-4774 Public exploit
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2010-4776 Public exploit
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers …
-
Unscored —CVE-2010-4771 Public exploit
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2010-4772 Public exploit
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2011-0182 Public exploit
The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which a…
-
Unscored —CVE-2011-0180 Public exploit
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) …
-
Unscored —
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticate…
-
Unscored —CVE-2011-0708 Public exploit
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…
-
Unscored —
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a …
-
Unscored —CVE-2011-1470 Public exploit
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application cras…
-
Unscored —
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to…
-
Unscored —
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in P…
-
Unscored —
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of se…
-
Unscored —
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) v…
-
Unscored —CVE-2011-0751 Public exploit
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute ar…
-
Unscored —CVE-2011-0745 Public exploit
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain dup…
-
Unscored —
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct …
-
High 7.8
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…
KEV Jun 8, 2022 -
Unscored —
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of servi…
-
Unscored —CVE-2011-1427 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2011-0167 Public exploit
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Poli…
-
Unscored —
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a den…
-
Unscored —
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Servi…
-
Unscored —CVE-2011-1099 Public exploit
Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) r…
-
Unscored —
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solutio…
-
Unscored —CVE-2011-1143 Public exploit
epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a …
-
Unscored —
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in …
-
Unscored —
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a den…
-
Unscored —CVE-2011-1106 Public exploit
Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to…
-
Unscored —CVE-2010-4747 Public exploit
Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.…
-
Unscored —CVE-2010-4750 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allo…
-
Unscored —CVE-2010-4751 Public exploit
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote aut…
-
Unscored —CVE-2010-4752 Public exploit
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote att…