Skip to content
OpenAdvisories

Archive

April 2011

Vulnerabilities first published in this month (UTC), newest first.

← March 2011 2011 / April May 2011 →
  1. 113
  2. 2 
  3. 36
  4. 4 
  5. 512
  6. 63
  7. 76
  8. 810
  9. 9 
  10. 1030
  11. 116
  12. 12 
  13. 1363
  14. 141
  15. 1517
  16. 16 
  17. 17 
  18. 1815
  19. 195
  20. 2059
  21. 2118
  22. 229
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2726
  28. 281
  29. 2912
  30. 30 
All Critical High Medium Low Exploited only Public exploit

312 results · Feed

  • Unscored —
    CVE-2011-0670

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Critical 9.8
    CVE-2011-0657 Public exploit EPSS 62%

    DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, W…

  • Unscored —
    CVE-2011-0098 EPSS 30%

    Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open …

  • Unscored —
    CVE-2011-0661 EPSS 45%

    The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows…

  • Unscored —
    CVE-2011-0034 EPSS 28%

    Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and…

  • Unscored —
    CVE-2011-0103 EPSS 25%

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow r…

  • Unscored —
    CVE-2011-0660 EPSS 17%

    The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server …

  • High 8.8
    CVE-2011-0663 EPSS 26%

    Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engi…

  • Unscored —
    CVE-2011-0041 Public exploit EPSS 28%

    Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1…

  • Unscored —
    CVE-2011-0655 EPSS 23%

    Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Of…

  • Unscored —
    CVE-2011-0028 EPSS 24%

    WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which…

  • Unscored —
    CVE-2011-0665

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-0656 EPSS 30%

    Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format …

  • Unscored —
    CVE-2011-0094 EPSS 22%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code b…

  • Unscored —
    CVE-2011-1244 EPSS 15%

    Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows r…

  • Unscored —
    CVE-2011-1243 EPSS 29%

    The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execu…

  • Unscored —
    CVE-2011-1245 EPSS 17%

    Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1) different domain or …

  • Unscored —
    CVE-2010-3958 EPSS 24%

    The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function ca…

  • Unscored —
    CVE-2010-3974 EPSS 19%

    fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S…

  • High 8.8
    CVE-2011-0611 Exploited Public exploit EPSS 99%

    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; …

    KEV Mar 3, 2022
  • Unscored —
    CVE-2011-0996

    dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtai…

  • Unscored —
    CVE-2011-0748 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack t…

  • Unscored —
    CVE-2011-0746

    Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allow…

  • Unscored —
    CVE-2011-1683

    IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS…

  • Unscored —
    CVE-2011-1500

    PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a …

    pithos Debian
  • Unscored —
    CVE-2011-1682 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hij…

  • Medium 6.1
    CVE-2011-1158

    feedparser Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascr…

    feedparser feedparser Debian PyPI
  • Medium 6.1
    CVE-2011-1157

    feedparser Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.

    feedparser feedparser Debian PyPI
  • Unscored —
    CVE-2011-1487 Public exploit EPSS 11%

    The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.…

    perl Debian
  • Unscored —
    CVE-2011-1401

    ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta …

    ikiwiki Debian
  • High 7.5
    CVE-2011-1156

    feedparser denial of service vulnerability

    feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.

    feedparser feedparser Debian PyPI
  • Medium 6.1
    CVE-2009-5065 Public exploit

    feedparser Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

    feedparser feedparser Debian PyPI
  • Unscored —
    CVE-2011-0994 EPSS 18%

    Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execu…

  • Unscored —
    CVE-2011-0765

    Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privil…

    lft Ubuntu
  • Unscored —
    CVE-2011-1095

    locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, whi…

    glibc Debian
  • Unscored —
    CVE-2011-1673

    BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading…

  • Unscored —
    CVE-2011-1672

    The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remot…

  • Unscored —
    CVE-2011-1675

    mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resour…

    util-linux Debian
  • Unscored —
    CVE-2011-1089

    The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for f…

    glibc Debian
  • Unscored —
    CVE-2011-1674

    The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to …