Skip to content
OpenAdvisories

Archive

May 2011

Vulnerabilities first published in this month (UTC), newest first.

← April 2011 2011 / May June 2011 →
  1. 1 
  2. 2 
  3. 365
  4. 46
  5. 510
  6. 6 
  7. 730
  8. 8 
  9. 918
  10. 1013
  11. 11 
  12. 12 
  13. 1341
  14. 14 
  15. 15 
  16. 1615
  17. 17 
  18. 18 
  19. 19 
  20. 2035
  21. 21 
  22. 22 
  23. 237
  24. 2413
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

295 results · Feed

  • Unscored —
    CVE-2011-1786

    lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build …

  • Unscored —
    CVE-2011-1444

    Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attack…

  • Unscored —
    CVE-2011-1785

    VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via…

  • Unscored —
    CVE-2011-1610 EPSS 25%

    Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Un…

  • Unscored —
    CVE-2011-1304

    Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via …

  • Unscored —
    CVE-2011-1613 Public exploit EPSS 10%

    Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, …

  • Unscored —
    CVE-2011-1434

    Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attack…

  • Unscored —
    CVE-2011-1437

    Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or p…

  • Unscored —
    CVE-2011-1609 Public exploit EPSS 20%

    SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)s…

  • Unscored —
    CVE-2011-1451

    Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial …

  • Unscored —
    CVE-2011-1441

    Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floatin…

  • Unscored —
    CVE-2011-1606

    Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2…

  • Unscored —
    CVE-2011-1442

    Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a den…

  • Unscored —
    CVE-2011-1447

    Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a den…

  • Unscored —
    CVE-2011-1607

    Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6…

  • Unscored —
    CVE-2011-1435

    Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote at…

  • Unscored —
    CVE-2011-1436

    Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote atta…

  • Unscored —
    CVE-2011-1443

    Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial …

  • Unscored —
    CVE-2011-1439

    Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact an…

  • Unscored —
    CVE-2011-1449

    Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attacke…

  • Unscored —
    CVE-2011-1303

    Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2011-1452

    Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a red…

  • Unscored —
    CVE-2011-1445

    Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denia…

  • Unscored —
    CVE-2011-1454

    Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote att…

  • Unscored —
    CVE-2011-1684

    Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media …

    vlc Debian
  • Unscored —
    CVE-2011-1847

    IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements …

  • Unscored —
    CVE-2011-1593

    Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local …

  • Unscored —
    CVE-2011-1522

    Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Do…

    doctrine Debian
  • Unscored —
    CVE-2011-1726

    Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject…

  • Unscored —
    CVE-2011-1846

    IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from gro…

  • Unscored —
    CVE-2011-1739

    The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specif…

  • Unscored —
    CVE-2011-1727

    Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject…

  • Unscored —
    CVE-2010-4665

    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attacker…

  • Unscored —
    CVE-2009-5022 Public exploit EPSS 12%

    Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execu…

    tiff Debian
  • Unscored —
    CVE-2011-0610

    The CoolType library in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4…

  • Unscored —
    CVE-2011-1545

    Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote a…

  • Unscored —
    CVE-2011-1845 EPSS 12%

    Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote…

  • Unscored —
    CVE-2011-1537

    Cross-site scripting (XSS) vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to inject…

  • Unscored —
    CVE-2011-1544

    Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to …

  • Unscored —
    CVE-2011-1494

    Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 a…