Archive
August 2011
Vulnerabilities first published in this month (UTC), newest first.
294 results · Feed
-
Unscored —
Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors rel…
-
Unscored —
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.…
-
Unscored —
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.…
-
Unscored —
The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attacker…
-
Unscored —
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remot…
-
Unscored —
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash…
-
Unscored —
The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wr…
-
Unscored —
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching…
-
Unscored —
WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciph…
-
Unscored —
Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.…
-
Unscored —
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in c…
-
Unscored —
Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.…
-
Unscored —
The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute ar…
-
Unscored —
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag…
-
Unscored —
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass …
-
Unscored —
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does no…
-
Unscored —
Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary…
-
Unscored —
Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group n…
-
Unscored —
Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befor…
-
Unscored —
CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.…
-
Unscored —
Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befo…
-
Unscored —
Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allo…
-
Unscored —
Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary fi…
-
Unscored —
Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which a…
-
Unscored —
Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle a…
-
Unscored —
Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-m…
-
Unscored —
Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows …
-
Unscored —
The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which a…
-
Unscored —
Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attacke…
-
Medium —
Plone XSS Vulnerability
Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.
-
Unscored —
The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in …
-
Unscored —
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS…
-
Unscored —
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attac…
-
Unscored —
Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attacke…
-
Unscored —
Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted…
-
Unscored —
The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which a…
-
Unscored —
The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 rel…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of se…