Skip to content
OpenAdvisories

Archive

March 2011

Vulnerabilities first published in this month (UTC), newest first.

  1. 134
  2. 216
  3. 362
  4. 42
  5. 5 
  6. 6 
  7. 77
  8. 819
  9. 96
  10. 104
  11. 1142
  12. 12 
  13. 13 
  14. 147
  15. 1511
  16. 1614
  17. 17 
  18. 1825
  19. 19 
  20. 2015
  21. 21 
  22. 2216
  23. 2328
  24. 24 
  25. 2510
  26. 26 
  27. 27 
  28. 2811
  29. 298
  30. 309
  31. 319

355 results · Feed

  • Unscored —

    Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote atta…

  • Unscored —

    The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common packag…

  • Unscored —

    The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Pas…

  • Unscored —

    Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-1519 Public exploit

    The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located…

  • Unscored —

    Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote at…

  • Unscored —

    HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP ser…

  • Unscored —
    CVE-2010-4770 Public exploit

    SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbi…

  • Unscored —

    Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi…

  • Unscored —
    CVE-2010-4769 Public exploit Scanner template

    Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read …

  • Unscored —

    The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node acces…

  • Unscored —
    CVE-2010-4774 Public exploit

    SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-4776 Public exploit

    SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers …

  • Unscored —
    CVE-2010-4771 Public exploit

    SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-4772 Public exploit

    Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary we…

  • Unscored —

    The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and o…

  • Unscored —

    The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New R…

  • Unscored —

    Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execut…

  • Unscored —
    CVE-2011-0182 Public exploit

    The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which a…

  • Unscored —

    Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or c…

  • Unscored —

    Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause …

  • Unscored —

    Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers…

  • Unscored —

    The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS…

  • Unscored —

    Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execut…

  • Unscored —
    CVE-2011-0180 Public exploit

    Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) …

  • Unscored —

    Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execut…

  • Unscored —

    CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —

    AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error…

  • Unscored —

    QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —

    The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a…

  • Unscored —

    Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might a…

  • Unscored —

    Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code…

  • Unscored —

    QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of s…

  • Unscored —

    Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, whi…

  • Unscored —

    Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to exec…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration page in the Recaptcha (aka WP-reCAPTCHA…

  • Unscored —

    Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows rem…

  • Unscored —

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.27 services for Lotus Domino has unknown impact and atta…

  • Unscored —

    The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr …