Skip to content
OpenAdvisories

Archive

April 2011

Vulnerabilities first published in this month (UTC), newest first.

  1. 113
  2. 2 
  3. 36
  4. 4 
  5. 512
  6. 63
  7. 76
  8. 810
  9. 9 
  10. 1030
  11. 116
  12. 12 
  13. 1363
  14. 141
  15. 1517
  16. 16 
  17. 17 
  18. 1815
  19. 195
  20. 2059
  21. 2118
  22. 229
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2726
  28. 281
  29. 2912
  30. 30 

312 results · Feed

  • Unscored —
    CVE-2011-1525 Public exploit EPSS 12%

    Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and …

  • Unscored —
    CVE-2011-1566 Public exploit EPSS 67%

    Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA Sys…

  • Unscored —
    CVE-2011-1569 Public exploit

    download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web r…

  • Unscored —

    Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary …

  • Unscored —
    CVE-2011-1568 Public exploit EPSS 19%

    Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.1…

  • Unscored —
    CVE-2011-1567 Public exploit EPSS 70%

    Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Gra…

  • Unscored —

    The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote…

  • Unscored —

    solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3…

  • Unscored —

    Unspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 has unknown impac…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 be…

  • Unscored —
    CVE-2011-1565 Public exploit EPSS 64%

    Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphic…

  • Unscored —
    CVE-2011-1563 Public exploit EPSS 75%

    Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlie…

  • Unscored —
    CVE-2011-1564 Public exploit EPSS 19%

    Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow rem…

  • Unscored —

    Unspecified vulnerability in the OS-Core.CORE2-KRN fileset in HP HP-UX B.11.23 and B.11.31 allows local users to cause …

  • Unscored —

    Unspecified vulnerability in HP Operations 9.10 on UNIX platforms allows remote authenticated users to bypass intended …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote attackers to inject arbi…

  • Unscored —
    CVE-2011-1083 Public exploit

    The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descr…

  • Unscored —
    CVE-2011-1082 Public exploit

    fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures witho…

  • Unscored —
    CVE-2011-1425 Public exploit

    xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, …

  • Unscored —
    CVE-2011-0951 Public exploit EPSS 15%

    The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2…

  • Unscored —

    The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local us…

  • Unscored —

    /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in op…

  • Unscored —

    SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers …

  • Unscored —
    CVE-2011-1556 Public exploit

    SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote …

  • Unscored —

    VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Li…

  • Unscored —
    CVE-2011-1557 Public exploit

    SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2011-1546 Public exploit

    Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to exe…

  • Unscored —

    Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x…

  • Unscored —

    Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupwar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote atta…