Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
January

CVEs published in January 2011

390 vulnerabilities, 74 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

phenotype-cms phenotype cmsSQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject...CVE-2011-0407Public exploit7.5 HighJanuary 11, 2011
wellintech kingviewHeap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers...CVE-2011-0406Public exploitEPSS 21.3%10.0 HighJanuary 11, 2011
phpgedviewDirectory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions,...CVE-2011-0405Public exploit6.8 MediumJanuary 11, 2011
netsupport manager agentStack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and...CVE-2011-0404Public exploitEPSS 64.7%7.5 HighJanuary 11, 2011
imgburnUntrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other...CVE-2011-0403Public exploit9.3 HighJanuary 11, 2011
troglobit pimdpimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary...CVE-2011-0007Fix available3.3 LowJanuary 11, 2011
joomla com searchCross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0...CVE-2011-0005Public exploit4.3 MediumJanuary 11, 2011
coppermine-gallery coppermine photo galleryMultiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and...CVE-2010-4693Public exploit4.3 MediumJanuary 11, 2011
phpstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...CVE-2010-4645Public exploitEPSS 15.1%5.0 MediumJanuary 11, 2011
linux kernel, redhat enterprise mrg, vmware esx +2 moreRace condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2...CVE-2010-4526Fix available7.1 HighJanuary 11, 2011
linux kernelLinux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure...CVE-2010-4525Fix available1.9 LowJanuary 11, 2011
citrix xenThe do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap...CVE-2010-42475.5 MediumJanuary 11, 2011
linux kernelThe hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the...CVE-2010-42424.0 MediumJanuary 11, 2011
monoUnspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote...CVE-2010-4225Fix available5.0 MediumJanuary 11, 2011
linux kernelInteger overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35...CVE-2010-41754.9 MediumJanuary 11, 2011
linux kernel, opensuse, suse linux enterprise high availability extension +1 more +3 moreInteger overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows...CVE-2010-38657.2 HighJanuary 11, 2011
fribidi gnu fribidi, kobi zamir pyfribidi +1 moreBuffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and...CVE-2010-3444Fix available7.5 HighJanuary 11, 2011
matomoPiwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which...CVE-2011-04015.0 MediumJanuary 10, 2011
matomoCookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https...CVE-2011-04005.0 MediumJanuary 10, 2011
matomoPiwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party...CVE-2011-03994.3 MediumJanuary 10, 2011
matomoThe Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP...CVE-2011-03986.4 MediumJanuary 10, 2011
matomoMultiple cross-site scripting (XSS) vulnerabilities in Piwik before 1.1 allow remote attackers to...CVE-2011-00044.3 MediumJanuary 10, 2011
djangoproject djangoImproper date handling in DjangoCVE-2010-4535Fix available5.0 MediumJanuary 10, 2011
djangoproject djangoImproper query string handling in DjangoCVE-2010-4534Fix available4.0 MediumJanuary 10, 2011
apple mac os x, mac os x server +1 moreFormat string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in...CVE-2010-40136.8 MediumJanuary 10, 2011
microsoft internet explorerMicrosoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI...CVE-2011-0347EPSS 22.3%9.3 HighJanuary 7, 2011
microsoft internet explorerUse-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet...CVE-2011-0346EPSS 31.0%9.3 HighJanuary 7, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...CVE-2010-46927.8 HighJanuary 7, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...CVE-2010-46917.8 HighJanuary 7, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreThe Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series...CVE-2010-46905.0 MediumJanuary 7, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not...CVE-2010-46897.8 HighJanuary 7, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreUnspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ...CVE-2010-46887.8 HighJanuary 7, 2011
novell vibe onpremCross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows...CVE-2010-43223.5 LowJanuary 7, 2011
ca arcserve replication and high availability, xosoft content distribution, xosoft high availability +1 more +3 moreBuffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA...CVE-2010-39847.5 HighJanuary 7, 2011
netwin surgemailCross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers...CVE-2010-3201Public exploit4.3 MediumJanuary 7, 2011
activecollabActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access...CVE-2010-02156.0 MediumJanuary 7, 2011
gimpHeap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro ...CVE-2010-4543Public exploitFix availableEPSS 16.3%7.5 HighJanuary 7, 2011
gimpStack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig...CVE-2010-4542Fix available6.8 MediumJanuary 7, 2011
gimpStack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the...CVE-2010-4541Fix available9.3 HighJanuary 7, 2011
gimpStack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui...CVE-2010-4540Fix available6.8 MediumJanuary 7, 2011
opensc-project openscMultiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically...CVE-2010-4523Fix available7.2 HighJanuary 7, 2011
cisco iosSTCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not...CVE-2010-46875.0 MediumJanuary 7, 2011
cisco iosCallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK...CVE-2010-46867.8 HighJanuary 7, 2011
cisco iosCisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate...CVE-2010-46854.0 MediumJanuary 7, 2011
cisco iosCisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to...CVE-2010-46847.1 HighJanuary 7, 2011
cisco iosMemory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of...CVE-2010-46837.8 HighJanuary 7, 2011
apache subversionMultiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated...CVE-2010-4644Fix available3.5 LowJanuary 7, 2011
apache subversionThe walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed...CVE-2010-4539Fix available6.8 MediumJanuary 7, 2011
wiresharkBuffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in...CVE-2010-4538Public exploitFix availableEPSS 29.0%9.3 HighJanuary 7, 2011
tibco activecatalog, collaborative information manager +1 moreSession fixation vulnerability in Collaborative Information Manager server, as used in TIBCO...CVE-2010-44994.3 MediumJanuary 7, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open