Archive
March 2011
Vulnerabilities first published in this month (UTC), newest first.
355 results · Feed
-
Unscored —
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration…
-
Unscored —
The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O bufferi…
-
Unscored —
IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of s…
-
Unscored —
Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services…
-
Unscored —
IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which …
-
Unscored —
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticate…
-
Unscored —
IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a deni…
-
Unscored —
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenti…
-
Unscored —
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenti…
-
Unscored —
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authent…
-
Unscored —
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated …
-
Unscored —CVE-2011-0708 Public exploit
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…
-
Unscored —
Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT K…
-
Unscored —
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a …
-
Unscored —
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (D…
-
Unscored —
chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolic…
-
Unscored —CVE-2011-1470 Public exploit
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application cras…
-
Unscored —
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to…
-
Unscored —
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in P…
-
Unscored —
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of se…
-
Unscored —
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a de…
-
Unscored —
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attac…
-
Unscored —
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) v…
-
Unscored —
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, …
-
Unscored —
The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies f…
-
Unscored —
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent att…
-
Unscored —
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cle…
-
Unscored —
The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly c…
-
Unscored —
Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon C…
-
Unscored —
Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly h…
-
Unscored —
The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to …
-
Unscored —
Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated use…
-
Unscored —
Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge perm…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote atta…
-
Unscored —
Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when th…
-
Unscored —
Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 127…
-
Unscored —
The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images…
-
Unscored —
installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text ty…
-
Unscored —
Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authen…
-
Unscored —
The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict t…