Archive
November 2011
Vulnerabilities first published in this month (UTC), newest first.
309 results · Feed
-
Unscored —
The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging dat…
-
Unscored —
The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System D…
-
Unscored —
IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local us…
-
Unscored —
Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which a…
-
Unscored —
The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.…
-
Unscored —
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict Cont…
-
Unscored —
The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which a…
-
Unscored —
libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obt…
-
Unscored —
FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial …
-
Unscored —
The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which a…
-
Unscored —
Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, …
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and S…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 1…
-
Unscored —
Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user confirmation be…
-
Unscored —
Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause …
-
Unscored —
Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote attackers to cause a deni…
-
Unscored —
Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a…
-
Unscored —
Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly h…
-
Unscored —
Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote at…
-
Unscored —
Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a deni…
-
Unscored —
www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt durin…
-
Unscored —CVE-2011-4431 Public exploit
Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to ex…
-
Unscored —
Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script o…
-
Unscored —
EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminat…
-
Unscored —
The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploadi…
-
Unscored —
Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify setting…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the RSS/Atom feed-reader implementation in Iwate Portal Bar allows remote a…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote atta…