CVEs published in January 2011

390 vulnerabilities, 74 critical, 0 exploited.

• symantec antivirus, system center, antivirus central quarantine server +2 more Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition ... CVE-2011-0688 9.3 HighJanuary 31, 2011
• opera browser Opera before 11.01 does not properly implement Wireless Application Protocol (WAP) dropdown lists... CVE-2011-0687 4.3 MediumJanuary 31, 2011
• opera browser Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of... CVE-2011-0686 5.0 MediumJanuary 31, 2011
• opera browser The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all... CVE-2011-0685 2.1 LowJanuary 31, 2011
• opera browser Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses,... CVE-2011-0684 5.0 MediumJanuary 31, 2011
• opera browser Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for... CVE-2011-0683 4.3 MediumJanuary 31, 2011
• opera browser Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute... CVE-2011-0682 9.3 HighJanuary 31, 2011
• opera browser The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01... CVE-2011-0681 4.3 MediumJanuary 31, 2011
• isc dhcp The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV... CVE-2011-0413 Fix available EPSS 32.6% 7.8 HighJanuary 31, 2011
• realnetworks realplayer, realplayer sp +1 more Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x... CVE-2010-4393 9.3 HighJanuary 31, 2011
• symantec antivirus, system center, antivirus central quarantine server +2 more HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel... CVE-2010-0111 Public exploit EPSS 34.5% 9.3 HighJanuary 31, 2011
• symantec antivirus, system center, antivirus central quarantine server +2 more Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used... CVE-2010-0110 7.9 HighJanuary 31, 2011
• google android data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2... CVE-2011-0680 5.0 MediumJanuary 31, 2011
• opera browser The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname... CVE-2011-0450 7.6 HighJanuary 31, 2011
• microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 more The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows... CVE-2011-0096 Public exploit EPSS 47.1% 4.3 MediumJanuary 31, 2011
• novell groupwise Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent ... CVE-2010-4717 Public exploit 6.5 MediumJanuary 31, 2011
• novell groupwise Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before... CVE-2010-4716 4.3 MediumJanuary 31, 2011
• novell groupwise Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer... CVE-2010-4715 Public exploit EPSS 28.3% 5.0 MediumJanuary 31, 2011
• novell groupwise Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to... CVE-2010-4714 10.0 HighJanuary 31, 2011
• novell groupwise Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise... CVE-2010-4713 10.0 HighJanuary 31, 2011
• novell groupwise Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell... CVE-2010-4712 10.0 HighJanuary 31, 2011
• novell groupwise Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in... CVE-2010-4711 Public exploit EPSS 13.6% 10.0 HighJanuary 31, 2011
• linux kernel The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6... CVE-2011-0521 Fix available 7.2 HighJanuary 30, 2011
• exim The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1)... CVE-2011-0017 Fix available 6.9 MediumJanuary 30, 2011
• linux kernel, canonical ubuntu linux +1 more The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37... CVE-2010-4656 Fix available 7.8 HighJanuary 30, 2011
• linux kernel, redhat enterprise linux desktop, enterprise linux eus +3 more +5 more Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the... CVE-2010-4649 Fix available 6.9 MediumJanuary 30, 2011
• cisco ios Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content... CVE-2011-0350 7.8 HighJanuary 28, 2011
• cisco ios Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content... CVE-2011-0349 7.8 HighJanuary 28, 2011
• cisco ios Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before... CVE-2011-0348 6.4 MediumJanuary 28, 2011
• novell groupwise Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2... CVE-2010-2779 4.3 MediumJanuary 28, 2011
• novell groupwise Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4... CVE-2010-2778 4.3 MediumJanuary 28, 2011
• novell groupwise Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in... CVE-2010-2777 Public exploit EPSS 10.4% 9.0 HighJanuary 28, 2011
• ibm websphere portal IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM)... CVE-2011-0679 5.0 MediumJanuary 28, 2011
• lomtec activeweb Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3... CVE-2011-0678 Public exploit 6.8 MediumJanuary 28, 2011
• hp openview storage data protector Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote... CVE-2011-0275 7.1 HighJanuary 28, 2011
• yahoo yui Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2... CVE-2010-4710 4.3 MediumJanuary 28, 2011
• novell groupwise Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise... CVE-2010-4326 EPSS 10.2% 10.0 HighJanuary 28, 2011
• novell groupwise Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8... CVE-2010-4325 10.0 HighJanuary 28, 2011
• looknstop look \'n\' stop firewall lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a... CVE-2011-0652 Public exploit 2.1 LowJanuary 28, 2011
• icon-labs iconfidant ssl server Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0... CVE-2011-0651 7.5 HighJanuary 28, 2011
• greenbone security assistant Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0... CVE-2011-0650 6.8 MediumJanuary 28, 2011
• maradns The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably... CVE-2011-0520 Fix available 7.5 HighJanuary 28, 2011
• oneidentity syslog-ng Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not... CVE-2011-0343 Fix available 6.9 MediumJanuary 28, 2011
• mozilla bugzilla Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates... CVE-2011-0048 Fix available 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x... CVE-2011-0046 Fix available 6.8 MediumJanuary 28, 2011
• openvas manager The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2... CVE-2011-0018 Public exploit 9.0 HighJanuary 28, 2011
• automatedsolutions modbus\/tcp master opc server Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2... CVE-2010-4709 Public exploit EPSS 16.2% 7.6 HighJanuary 28, 2011
• mozilla bugzilla CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x... CVE-2010-4572 Fix available 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7... CVE-2010-4570 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows... CVE-2010-4569 4.3 MediumJanuary 28, 2011
• Show olderLoading…