Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

484 results · Feed

  • Unscored —

    Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.0, 10.0.1.0, 10.2.1…

  • Unscored —

    Unspecified vulnerability in Oracle Linux 4 and 5 allows remote authenticated users to affect confidentiality and integ…

  • Unscored —

    Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different v…

  • Unscored —

    Unspecified vulnerability in the Siebel Apps - Marketing component in Oracle Siebel CRM 8.0.0 allows remote attackers t…

  • Unscored —

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0…

  • Unscored —

    Unspecified vulnerability in the Oracle Waveset component in Oracle Sun Products Suite 8.1.0 and 8.1.1 allows remote at…

  • Unscored —

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0…

  • Unscored —

    Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Ap…

  • Unscored —

    Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality, related to Network Se…

  • Unscored —

    Unspecified vulnerability in Oracle Solaris 9 and 11 Express allows local users to affect confidentiality and integrity…

  • Unscored —

    Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.…

  • Unscored —

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3…

  • Unscored —

    Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different v…

  • Unscored —

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.2,…

  • Unscored —

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, …

  • Unscored —

    Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.1.0.7 allows remote authenticate…

  • Unscored —

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3…

  • Unscored —
    CVE-2011-4062 Public exploit

    Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or…

  • Unscored —

    The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_…

  • Unscored —

    Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used …

  • Unscored —

    recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary command…

  • Unscored —

    /etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the ro…

  • Unscored —

    Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows…

  • Unscored —

    The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystr…

  • Unscored —

    CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it ea…

  • Unscored —

    Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows…

  • Unscored —

    Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote…

  • Unscored —

    CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of servi…

  • Unscored —

    The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, …

  • Unscored —

    CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote a…

  • Unscored —

    The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remo…

  • Unscored —

    The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 has…

  • Unscored —

    Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause…

  • Unscored —

    The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the…

  • Unscored —

    CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote att…

  • Unscored —

    FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly othe…

  • Unscored —

    Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a deni…

  • Unscored —

    The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allo…

  • Unscored —

    The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help info…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary …