Skip to content
OpenAdvisories

Archive

13 May 2011

Vulnerabilities first published on this day (UTC), newest first.

← April 2011 2011 / May /13 June 2011 →
  1. 1 
  2. 2 
  3. 365
  4. 46
  5. 510
  6. 6 
  7. 730
  8. 8 
  9. 918
  10. 1013
  11. 11 
  12. 12 
  13. 1341
  14. 14 
  15. 15 
  16. 1615
  17. 17 
  18. 18 
  19. 19 
  20. 2035
  21. 21 
  22. 22 
  23. 237
  24. 2413
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

41 results · Feed

  • Unscored —
    CVE-2011-0621

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0625

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0619

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0624

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0622

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0626

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0620

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0579

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • High 8.8
    CVE-2011-0627

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0623

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows…

  • Unscored —
    CVE-2011-0618

    Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.…

  • Unscored —
    CVE-2011-0633

    The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, …

    libwww-perl Debian
  • Unscored —
    CVE-2011-1404

    Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated u…

  • Unscored —
    CVE-2011-1406

    Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier f…

  • Unscored —
    CVE-2011-1405

    Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary w…

  • Unscored —
    CVE-2011-1403

    Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote att…

  • Unscored —
    CVE-2011-1326

    Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2011-1402

    Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user accoun…

  • Unscored —
    CVE-2011-0341

    Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 f…

  • Low —
    CVE-2011-0995

    sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges

    The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

    sqlite3-ruby RubyGems
  • Unscored —
    CVE-2011-0761 Public exploit

    Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application c…

    perl Debian
  • Unscored —
    CVE-2011-1854 EPSS 11%

    Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to e…

  • Unscored —
    CVE-2011-1853 EPSS 11%

    tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitra…

  • Low —
    CVE-2011-1772 Public exploit EPSS 33%

    Cross-site Scripting in Apache Struts

    Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the act…

    org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2011-1737

    Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow r…

  • Unscored —
    CVE-2011-1270 EPSS 16%

    Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2011-1848 EPSS 13%

    Stack-based buffer overflow in img.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote atta…

  • Unscored —
    CVE-2011-1840

    The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and un…

  • Unscored —
    CVE-2011-1720 EPSS 22%

    The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain…

    postfix Debian
  • Unscored —
    CVE-2011-1849 EPSS 11%

    tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overw…

  • Unscored —
    CVE-2011-1325

    Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authenti…

  • Unscored —
    CVE-2011-1269 EPSS 15%

    Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for…

  • Unscored —
    CVE-2011-1738

    HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows loc…

  • Unscored —
    CVE-2011-1851 EPSS 13%

    Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remo…

  • Unscored —
    CVE-2011-1248 Public exploit EPSS 48%

    WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket sen…

  • Unscored —
    CVE-2011-1850 EPSS 13%

    Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center (IMC) 5.0 bef…

  • Unscored —
    CVE-2011-1855

    Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows local users to read or modify (1) log files o…

  • Unscored —
    CVE-2011-1852 EPSS 15%

    Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 a…

  • Medium —
    CVE-2011-2087

    Apache Struts Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .a…

    org.apache.struts:struts2-parent Maven
  • Unscored —
    CVE-2011-2089 Public exploit EPSS 38%

    Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0…