Skip to content
OpenAdvisories

Archive

2 September 2011

Vulnerabilities first published on this day (UTC), newest first.

← August 2011 2011 / September /2 October 2011 →
  1. 1 
  2. 219
  3. 3 
  4. 4 
  5. 5 
  6. 618
  7. 7 
  8. 88
  9. 99
  10. 103
  11. 111
  12. 12 
  13. 1312
  14. 145
  15. 1533
  16. 1618
  17. 1738
  18. 18 
  19. 192
  20. 209
  21. 218
  22. 229
  23. 2368
  24. 2467
  25. 25 
  26. 26 
  27. 2725
  28. 2816
  29. 2914
  30. 305
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2011-0543

    Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonic…

    fuse Debian
  • Unscored —
    CVE-2011-0541

    fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount a…

    fuse Debian
  • Unscored —
    CVE-2011-0311

    The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 …

  • Unscored —
    CVE-2011-0542

    fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows lo…

    fuse Debian
  • Medium —
    CVE-2011-1411

    Improper Authentication in OpenSAML

    Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

    org.opensaml:opensaml Maven
  • Unscored —
    CVE-2011-3387

    The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory…

  • Unscored —
    CVE-2011-3386

    Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to…

  • Unscored —
    CVE-2011-2176

    GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local use…

    network-manager Debian
  • Unscored —
    CVE-2011-3385

    Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, all…

  • Unscored —
    CVE-2009-5086

    Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4…

  • Unscored —
    CVE-2011-0342

    Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studi…

  • Unscored —
    CVE-2011-1944 Public exploit EPSS 13%

    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, all…

    libxml2 Debian
  • Unscored —
    CVE-2011-3133

    Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and…

  • Unscored —
    CVE-2011-3134

    Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.…

  • Unscored —
    CVE-2011-3132

    Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before …

  • Unscored —
    CVE-2011-2762

    The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote attackers to bypass authentication via…

  • Unscored —
    CVE-2011-2763 Public exploit EPSS 36%

    The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2011-2903

    Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command …

    tcptrack Debian
  • Unscored —
    CVE-2011-2594

    Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbi…