Archive
March 2011
Vulnerabilities first published in this month (UTC), newest first.
355 results · Feed
-
Unscored —
Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows …
-
Unscored —
Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a san…
-
Unscored —
Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 10.0.648.127 allow remote attackers to bypass the pop-up b…
-
Unscored —
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.…
-
Unscored —CVE-2011-1347 EPSS 28%
Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mod…
-
Unscored —CVE-2011-1346 EPSS 26%
Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary co…
-
Unscored —
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iP…
-
Unscored —CVE-2011-1345 EPSS 41%
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —
Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 allows remote attackers to execute arbitrary cod…
-
High 7.8CVE-2011-0042 EPSS 33%
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP…
-
High 7.4
Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows …
-
Unscored —CVE-2011-0032 EPSS 10%
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windo…
-
Unscored —CVE-2011-1099 Public exploit
Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) r…
-
Unscored —
SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to exec…
-
Unscored —
Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remo…
-
Unscored —
Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the …
-
Unscored —
The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, …
-
Unscored —
The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log direct…
-
Unscored —
Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown imp…
-
Unscored —
The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) b…
-
Unscored —
Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers t…
-
Unscored —
The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows…
-
Unscored —
The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests…
-
Unscored —
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7…
-
Unscored —
The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows rem…
-
Unscored —
The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when …
-
Unscored —
Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Appl…
-
Unscored —
Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSpher…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install compone…
-
Unscored —
Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 all…
-
Unscored —
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application…
-
Unscored —
The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6…
-
Unscored —
The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x …
-
Unscored —
Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) c…
-
Unscored —
The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does no…
-
Unscored —
shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control (DTC) before 0.32.9 …
-
Unscored —
HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication set…
-
Unscored —
The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a …
-
Unscored —
Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow remote attackers to exec…