Skip to content
OpenAdvisories

Archive

8 April 2011

Vulnerabilities first published on this day (UTC), newest first.

  1. 113
  2. 2 
  3. 36
  4. 4 
  5. 512
  6. 63
  7. 76
  8. 810
  9. 9 
  10. 1030
  11. 116
  12. 12 
  13. 1363
  14. 141
  15. 1517
  16. 16 
  17. 17 
  18. 1815
  19. 195
  20. 2059
  21. 2118
  22. 229
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2726
  28. 281
  29. 2912
  30. 30 

10 results · Feed

  • Unscored —
    CVE-2011-0997 EPSS 85%

    dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allo…

  • Unscored —

    xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shel…

  • Unscored —
    CVE-2011-0536 Public exploit

    Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (ak…

  • Medium —
    CVE-2011-1475 Public exploit

    Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

    The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, …

  • Unscored —

    The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended logi…

  • Unscored —

    ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is…

  • Unscored —

    Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent…

  • Medium —

    Access controll bypass in Apache Tomcat

    Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exist…

  • Unscored —

    steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request…

  • Unscored —
    CVE-2011-1071 Public exploit EPSS 14%

    The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to e…