Skip to content
OpenAdvisories

Archive

9 August 2011

Vulnerabilities first published on this day (UTC), newest first.

← July 2011 2011 / August /9 September 2011 →
  1. 113
  2. 2 
  3. 331
  4. 411
  5. 59
  6. 6 
  7. 7 
  8. 8 
  9. 923
  10. 1047
  11. 1117
  12. 1211
  13. 13 
  14. 14 
  15. 1513
  16. 164
  17. 17 
  18. 1830
  19. 1912
  20. 20 
  21. 21 
  22. 22 
  23. 2313
  24. 247
  25. 259
  26. 26 
  27. 27 
  28. 28 
  29. 2937
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2011-3014

    The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching…

  • Unscored —
    CVE-2011-3013

    WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciph…

  • Unscored —
    CVE-2011-2222

    Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.…

  • Unscored —
    CVE-2011-2223

    The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in c…

  • Unscored —
    CVE-2011-2589

    Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.…

  • Unscored —
    CVE-2011-2590

    The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute ar…

  • Unscored —
    CVE-2011-2224

    The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag…

  • Unscored —
    CVE-2011-2221

    The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass …

  • Unscored —
    CVE-2011-3012

    The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does no…

    ioquake3 ioquake3 openarena Debian Ubuntu
  • Unscored —
    CVE-2011-2977

    Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary…

  • Unscored —
    CVE-2011-2979

    Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group n…

  • Unscored —
    CVE-2011-2380

    Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befor…

  • Unscored —
    CVE-2011-2381

    CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x …

  • Unscored —
    CVE-2011-2379

    Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.…

  • Unscored —
    CVE-2011-2976

    Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.…

  • Unscored —
    CVE-2011-2978

    Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befo…

  • Unscored —
    CVE-2008-7295

    Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allo…

  • Unscored —
    CVE-2008-7292

    Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary fi…

  • Unscored —
    CVE-2008-7294

    Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which a…

  • Unscored —
    CVE-2008-7297

    Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle a…

  • Unscored —
    CVE-2008-7296

    Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-m…

  • Unscored —
    CVE-2008-7293

    Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows …

  • Unscored —
    CVE-2008-7298

    The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which a…