Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
January

CVEs published in January 2011

390 vulnerabilities, 74 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

phpUse-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might...CVE-2010-46976.8 MediumJanuary 18, 2011
phpPHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...CVE-2006-72435.0 MediumJanuary 18, 2011
objectivity objectivity\/dbThe server components in Objectivity/DB 10.0 do not require authentication for administrative...CVE-2011-0489Public exploitEPSS 12.6%7.5 HighJanuary 18, 2011
advantech studio, indusoft web studio +1 moreStack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer,...CVE-2011-048810.0 HighJanuary 18, 2011
icqICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to...CVE-2011-04879.3 HighJanuary 18, 2011
ibm cognos 8 business intelligenceCross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI)...CVE-2011-04864.3 MediumJanuary 18, 2011
libpngpngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service ...CVE-2011-04086.8 MediumJanuary 18, 2011
hp loadrunnerUnspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code...CVE-2011-0272EPSS 13.4%10.0 HighJanuary 18, 2011
todd miller sudocheck.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a...CVE-2011-0010Fix available4.4 MediumJanuary 18, 2011
joomla joomla\!Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to...CVE-2010-46967.5 HighJanuary 18, 2011
hastymail hastymail2Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to...CVE-2010-46464.3 MediumJanuary 18, 2011
muscle pcsc-liteStack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler ...CVE-2010-4531Fix available4.4 MediumJanuary 18, 2011
muscle pcsc-liteSignedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID)...CVE-2010-4530Fix available4.4 MediumJanuary 18, 2011
linux kernel, vmware esx, esxi +2 moreThe igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb...CVE-2010-42637.9 HighJanuary 18, 2011
joomla joomla\!Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to...CVE-2010-41667.5 HighJanuary 18, 2011
hastymail hastymail2Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session,...CVE-2009-50515.0 MediumJanuary 18, 2011
torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a...CVE-2011-0493Fix available5.0 MediumJanuary 17, 2011
torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial...CVE-2011-0492Fix available5.0 MediumJanuary 17, 2011
torThe tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not...CVE-2011-0491Fix available5.0 MediumJanuary 17, 2011
torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log...CVE-2011-0490Fix available5.0 MediumJanuary 17, 2011
torHeap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote...CVE-2011-0427Fix available6.8 MediumJanuary 17, 2011
torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory...CVE-2011-0016Fix available2.1 LowJanuary 17, 2011
torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of...CVE-2011-0015Fix available5.0 MediumJanuary 17, 2011
citrix access gatewayThe web authentication form in the NT4 authentication component in Citrix Access Gateway...CVE-2010-4566Public exploitEPSS 27.8%9.3 HighJanuary 14, 2011
hypermail-project hypermailCross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject...CVE-2010-43394.3 MediumJanuary 14, 2011
gnu gnashThe configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink...CVE-2010-43373.3 LowJanuary 14, 2011
cakefoundation cakephpCakePHP allows remote attackers to modify internal Cake cache and execute arbitrary codeCVE-2010-4335Public exploitFix availableEPSS 55.2%7.5 HighJanuary 14, 2011
linux kernelinclude/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception...CVE-2010-30864.9 MediumJanuary 14, 2011
symantec web gatewaySQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4...CVE-2010-01157.5 HighJanuary 14, 2011
mysqlMySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial...CVE-2010-38394.0 MediumJanuary 14, 2011
catb gif2pngA certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1...CVE-2010-46955.0 MediumJanuary 14, 2011
catb gif2pngBuffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers...CVE-2010-46946.8 MediumJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech...CVE-2011-048510.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM...CVE-2011-04847.5 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast...CVE-2011-04835.0 MediumJanuary 14, 2011
google chrome, chrome os, debian linux +2 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast...CVE-2011-04824.3 MediumJanuary 14, 2011
google chrome, chrome os +1 moreBuffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows...CVE-2011-04819.3 HighJanuary 14, 2011
google chrome, chrome os, canonical ubuntu linux +1 more +3 moreMultiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google...CVE-2011-0480Fix available9.3 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with...CVE-2011-04797.5 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use...CVE-2011-047810.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a...CVE-2011-047710.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause...CVE-2011-047610.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreUse-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344...CVE-2011-04759.3 HighJanuary 14, 2011
google chrome, chrome os, debian linux +2 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle...CVE-2011-047410.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle...CVE-2011-047310.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the...CVE-2011-04729.3 HighJanuary 14, 2011
google chrome, chrome os +1 moreThe node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0...CVE-2011-047110.0 HighJanuary 14, 2011
google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle...CVE-2011-04705.0 MediumJanuary 14, 2011
catb gif2pngStack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context...CVE-2009-5018Public exploitEPSS 10.9%6.8 MediumJanuary 14, 2011
io-socket-sslThe IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to...CVE-2010-4334Fix available4.0 MediumJanuary 14, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open