Skip to content
OpenAdvisories

Archive

May 2011

Vulnerabilities first published in this month (UTC), newest first.

← April 2011 2011 / May June 2011 →
  1. 1 
  2. 2 
  3. 365
  4. 46
  5. 510
  6. 6 
  7. 730
  8. 8 
  9. 918
  10. 1013
  11. 11 
  12. 12 
  13. 1341
  14. 14 
  15. 15 
  16. 1615
  17. 17 
  18. 18 
  19. 19 
  20. 2035
  21. 21 
  22. 22 
  23. 237
  24. 2413
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

295 results · Feed

  • Unscored —
    CVE-2011-0076

    Unspecified vulnerability in the Java Embedding Plugin (JEP) in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, …

  • Unscored —
    CVE-2011-0069

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x be…

  • Unscored —
    CVE-2011-0073 Public exploit EPSS 71%

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange d…

  • Unscored —
    CVE-2011-0080

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2011-0078

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0077

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0074

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0072

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0070

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x be…

  • Unscored —
    CVE-2011-0065 Public exploit EPSS 74%

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, all…

  • Unscored —
    CVE-2011-0067

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocom…

  • Unscored —
    CVE-2011-0081

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunde…

  • Unscored —
    CVE-2011-0071

    Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, …

  • Unscored —
    CVE-2011-0075

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-1901

    The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Pr…

  • Unscored —
    CVE-2011-1905

    Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messagin…

  • Unscored —
    CVE-2011-1904

    An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier i…

  • Unscored —
    CVE-2011-1906

    Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, wh…

  • Unscored —
    CVE-2011-1902

    Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and…

  • Unscored —
    CVE-2011-1903

    SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and…

  • Unscored —
    CVE-2011-0756

    The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it …

  • Unscored —
    CVE-2011-1208

    IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before …

  • Unscored —
    CVE-2011-1207

    The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in…

  • Unscored —
    CVE-2011-1423

    Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows…

  • Unscored —
    CVE-2011-0340 Public exploit EPSS 32%

    Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol …

  • Unscored —
    CVE-2011-0714

    Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.…

  • Unscored —
    CVE-2011-1825

    Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authent…

  • Unscored —
    CVE-2011-1826

    Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) bef…

  • Unscored —
    CVE-2011-1900 Public exploit EPSS 32%

    Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote at…

  • Unscored —
    CVE-2011-1209

    IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encrypti…

  • Unscored —
    CVE-2011-1456

    Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-1446

    Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation er…

  • Unscored —
    CVE-2011-1305

    Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2011-1455

    Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote at…

  • Unscored —
    CVE-2011-1604

    Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7…

  • Unscored —
    CVE-2011-1605

    Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2…

  • Unscored —
    CVE-2011-1448

    Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause …

  • Unscored —
    CVE-2011-1440

    Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-1438

    Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs.

  • Unscored —
    CVE-2011-1450

    Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denia…