Skip to content
OpenAdvisories

Archive

August 2011

Vulnerabilities first published in this month (UTC), newest first.

← July 2011 2011 / August September 2011 →
  1. 113
  2. 2 
  3. 331
  4. 411
  5. 59
  6. 6 
  7. 7 
  8. 8 
  9. 923
  10. 1047
  11. 1117
  12. 1211
  13. 13 
  14. 14 
  15. 1513
  16. 164
  17. 17 
  18. 1830
  19. 1912
  20. 20 
  21. 21 
  22. 22 
  23. 2313
  24. 247
  25. 259
  26. 26 
  27. 27 
  28. 28 
  29. 2937
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Unscored —
    CVE-2011-2577 Public exploit EPSS 13%

    Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, w…

  • Unscored —
    CVE-2011-0228 Public exploit

    The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints param…

  • Medium —
    CVE-2011-3187 Public exploit

    actionpack Improper Input Validation vulnerability

    The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into …

    rails actionpack Debian RubyGems
  • Unscored —
    CVE-2011-3192 Public exploit EPSS 99%

    The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote atta…

    apache2 Debian
  • Unscored —
    CVE-2011-3182 Public exploit EPSS 19%

    PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which …

  • Unscored —
    CVE-2010-4829 Public exploit

    SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers…

  • Unscored —
    CVE-2010-4830 Public exploit

    SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows …

  • Unscored —
    CVE-2011-2950 Public exploit EPSS 29%

    Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and…

  • Unscored —
    CVE-2011-3142 Public exploit EPSS 38%

    Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote at…

  • Unscored —
    CVE-2011-0257 Public exploit EPSS 60%

    Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2011-3011 Public exploit EPSS 72%

    BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain…

  • Unscored —
    CVE-2011-2357 Public exploit

    Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows loca…

  • Unscored —
    CVE-2011-2132 Public exploit

    Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2011-2131 Public exploit EPSS 22%

    Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execut…

  • Unscored —
    CVE-2011-2404 Public exploit EPSS 74%

    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers t…

  • Unscored —
    CVE-2011-2140 Public exploit EPSS 82%

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Ado…

  • Unscored —
    CVE-2011-1976 Public exploit EPSS 21%

    Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Vi…

  • Unscored —
    CVE-2011-1974 Public exploit

    NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Serv…

  • Unscored —
    CVE-2011-1965 Public exploit EPSS 25%

    Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not proper…

  • Unscored —
    CVE-2011-2900 Public exploit EPSS 13%

    Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS…

  • Unscored —
    CVE-2011-2975 Public exploit

    Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote …

    mapserver Debian
  • Unscored —
    CVE-2011-2403 Public exploit

    SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users …