Archive
8 April 2011
Vulnerabilities first published on this day (UTC), newest first.
10 results · Feed
-
Unscored —CVE-2011-0997 EPSS 85%
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allo…
-
Unscored —
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shel…
-
Unscored —CVE-2011-0536 Public exploit
Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (ak…
-
Medium —CVE-2011-1475 Public exploit
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, …
-
Unscored —
The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended logi…
-
Unscored —
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is…
-
Unscored —
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent…
-
Medium —
Access controll bypass in Apache Tomcat
Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exist…
-
Unscored —
steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request…
-
Unscored —
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to e…