Skip to content
OpenAdvisories

Archive

March 2011

Vulnerabilities first published in this month (UTC), newest first.

  1. 134
  2. 216
  3. 362
  4. 42
  5. 5 
  6. 6 
  7. 77
  8. 819
  9. 96
  10. 104
  11. 1142
  12. 12 
  13. 13 
  14. 147
  15. 1511
  16. 1614
  17. 17 
  18. 1825
  19. 19 
  20. 2015
  21. 21 
  22. 2216
  23. 2328
  24. 24 
  25. 2510
  26. 26 
  27. 27 
  28. 2811
  29. 298
  30. 309
  31. 319

41 results · Clear filters · Feed

  • Unscored —
    CVE-2010-3695 Public exploit

    Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail E…

  • Unscored —
    CVE-2011-1524 Public exploit

    Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) be…

  • Unscored —
    CVE-2011-0545 Public exploit

    Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 all…

  • Unscored —
    CVE-2010-3275 Public exploit EPSS 76%

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2011-1519 Public exploit

    The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located…

  • Unscored —
    CVE-2010-4770 Public exploit

    SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4769 Public exploit

    Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read …

  • Unscored —
    CVE-2010-4774 Public exploit

    SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-4776 Public exploit

    SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers …

  • Unscored —
    CVE-2010-4771 Public exploit

    SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-4772 Public exploit

    Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2011-0182 Public exploit

    The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which a…

  • Unscored —
    CVE-2011-0180 Public exploit

    Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) …

  • Unscored —
    CVE-2010-4228 Public exploit EPSS 15%

    Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticate…

  • Unscored —
    CVE-2011-0708 Public exploit

    exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…

  • Unscored —
    CVE-2011-0421 Public exploit EPSS 14%

    The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a …

  • Unscored —
    CVE-2011-1470 Public exploit

    The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2011-1471 Public exploit EPSS 13%

    Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to…

  • Unscored —
    CVE-2011-1467 Public exploit EPSS 13%

    Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in P…

  • Unscored —
    CVE-2011-1468 Public exploit EPSS 13%

    Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of se…

  • Unscored —
    CVE-2011-1081 Public exploit EPSS 14%

    modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) v…

  • Unscored —
    CVE-2011-0751 Public exploit

    Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute ar…

  • Unscored —
    CVE-2011-0745 Public exploit

    SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain dup…

  • Unscored —
    CVE-2011-0063 Public exploit EPSS 85%

    The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct …

  • High 7.8
    CVE-2011-0609 Exploited Public exploit EPSS 64%

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2011-1092 Public exploit EPSS 18%

    Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of servi…

  • Unscored —
    CVE-2011-1427 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2011-0167 Public exploit

    The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Poli…

  • Unscored —
    CVE-2011-1137 Public exploit EPSS 28%

    Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a den…

  • Unscored —
    CVE-2010-3609 Public exploit EPSS 17%

    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Servi…

  • Unscored —
    CVE-2011-1099 Public exploit

    Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) r…

  • Unscored —
    CVE-2009-3028 Public exploit EPSS 43%

    The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solutio…

  • Unscored —
    CVE-2011-1143 Public exploit

    epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a …

  • Unscored —
    CVE-2011-1140 Public exploit EPSS 13%

    Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in …

  • Unscored —
    CVE-2011-0762 Public exploit EPSS 74%

    The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a den…

  • Unscored —
    CVE-2011-1106 Public exploit

    Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to…

  • Unscored —
    CVE-2010-4747 Public exploit

    Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.…

  • Unscored —
    CVE-2010-4750 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allo…

  • Unscored —
    CVE-2010-4751 Public exploit

    SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote aut…

  • Unscored —
    CVE-2010-4752 Public exploit

    SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote att…