10 April 2011

30 results · Feed

• Unscored —
  CVE-2011-0994 EPSS 18%

  Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execu…

  Apr 10, 2011
• Unscored —
  CVE-2011-0765

  Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privil…

  lft Ubuntu
  Apr 10, 2011
• Unscored —
  CVE-2011-1095

  locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, whi…

  glibc Debian
  Apr 10, 2011
• Unscored —
  CVE-2011-1673

  BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading…

  Apr 10, 2011
• Unscored —
  CVE-2011-1672

  The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remot…

  Apr 10, 2011
• Unscored —
  CVE-2011-1675

  mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resour…

  util-linux Debian
  Apr 10, 2011
• Unscored —
  CVE-2011-1089

  The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for f…

  glibc Debian
  Apr 10, 2011
• Unscored —
  CVE-2011-1674

  The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to …

  Apr 10, 2011
• Unscored —
  CVE-2011-1677

  mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount ent…

  util-linux Debian
  Apr 10, 2011
• Unscored —
  CVE-2011-1678

  smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to …

  samba cifs-utils Debian
  Apr 10, 2011
• Unscored —
  CVE-2011-1676

  mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry…

  Apr 10, 2011
• Unscored —
  CVE-2011-1679

  ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the…

  Apr 10, 2011
• Unscored —
  CVE-2011-1680

  ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entr…

  Apr 10, 2011
• Unscored —
  CVE-2011-1681

  vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append…

  open-vm-tools Debian
  Apr 10, 2011
• Unscored —
  CVE-2011-0463

  The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in t…

  Apr 10, 2011
• Unscored —
  CVE-2011-0466

  The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass inten…

  Apr 10, 2011
• Unscored —
  CVE-2011-0462

  Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Ser…

  Apr 10, 2011
• Unscored —
  CVE-2011-1669 Public exploit Scanner template EPSS 22%

  Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote …

  Apr 10, 2011
• Unscored —
  CVE-2011-1668 Public exploit

  Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other ve…

  Apr 10, 2011
• Unscored —
  CVE-2011-1667 Public exploit

  SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL command…

  Apr 10, 2011
• Unscored —
  CVE-2011-1661

  The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows rem…

  Apr 10, 2011
• Unscored —
  CVE-2011-1664

  Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal all…

  Apr 10, 2011
• Unscored —
  CVE-2011-1670 Public exploit

  Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions…

  Apr 10, 2011
• Unscored —
  CVE-2011-1163

  The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid…

  Apr 10, 2011
• Unscored —
  CVE-2011-1671 Public exploit

  Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel a…

  Apr 10, 2011
• Unscored —
  CVE-2011-1662

  Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote …

  Apr 10, 2011
• Unscored —
  CVE-2011-1665 Public exploit

  PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote atta…

  Apr 10, 2011
• Unscored —
  CVE-2011-1666

  Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php…

  Apr 10, 2011
• Unscored —
  CVE-2011-1660

  Multiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dyn…

  Apr 10, 2011
• Unscored —
  CVE-2011-1663

  SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers…

  Apr 10, 2011