Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
January

CVEs published in January 2011

390 vulnerabilities, 74 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

lotuscms fraiseDirectory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when...CVE-2011-0518Public exploitEPSS 15.8%5.1 MediumJanuary 20, 2011
sielcosistemi winlog proStack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP...CVE-2011-0517Public exploitEPSS 40.5%9.3 HighJanuary 20, 2011
epromptc betmore site suiteSQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0...CVE-2011-0516Public exploit7.5 HighJanuary 20, 2011
kingsoft antivirus, kingsoftsecurity kingsoft antivirus +1 moreKisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause...CVE-2011-0515Public exploit2.1 LowJanuary 20, 2011
hp data protector managerThe RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a...CVE-2011-0514Public exploitEPSS 48.9%5.0 MediumJanuary 20, 2011
securstar drivecryptDCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute...CVE-2011-0513Public exploit7.2 HighJanuary 20, 2011
jikaka teams structure moduleSQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows...CVE-2011-0512Public exploit6.8 MediumJanuary 20, 2011
joomtraders com allcinevidSQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows...CVE-2011-0511Public exploit7.5 HighJanuary 20, 2011
awbs advanced webhost billing systemSQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and...CVE-2011-0510Public exploit7.5 HighJanuary 20, 2011
vaadinCross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject...CVE-2011-05094.3 MediumJanuary 20, 2011
contao cmsCross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2...CVE-2011-05084.3 MediumJanuary 20, 2011
blackmoonftpserver blackmoon ftp serverFTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other...CVE-2011-0507Public exploit4.3 MediumJanuary 20, 2011
tsixm axdcmsDirectory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1...CVE-2011-0506Public exploit6.8 MediumJanuary 20, 2011
remi jean zwiiDirectory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is...CVE-2011-0505Public exploit5.1 MediumJanuary 20, 2011
vamshop vam shopMultiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier...CVE-2011-0504Public exploit4.3 MediumJanuary 20, 2011
vamsoft vam shopCross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier...CVE-2011-0503Public exploit6.8 MediumJanuary 20, 2011
musanim music animation machine midi playerMusic Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user...CVE-2011-0502Public exploit9.3 HighJanuary 20, 2011
musanim music animation machine midi playerStack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and...CVE-2011-0501Public exploitEPSS 16.3%9.3 HighJanuary 20, 2011
verytools videospirit lite, videospirit pro +1 moreBuffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and...CVE-2011-0500Public exploitEPSS 30.7%9.3 HighJanuary 20, 2011
verytools videospirit lite, videospirit pro +1 moreBuffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1...CVE-2011-0499Public exploitEPSS 31.0%9.3 HighJanuary 20, 2011
nokia multimedia playerStack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions,...CVE-2011-0498Public exploit9.3 HighJanuary 20, 2011
sybase easerver, replication server, workspace +1 more +3 moreDirectory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon,...CVE-2011-04977.8 HighJanuary 20, 2011
sybase easerver, replication server, workspace +1 more +3 moreUnspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon,...CVE-2011-049610.0 HighJanuary 20, 2011
digium asterisk, debian linux, digium asterisknow +2 more +4 moreStack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open...CVE-2011-0495Fix available6.0 MediumJanuary 20, 2011
todd miller sudoA certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly...CVE-2011-00086.9 MediumJanuary 20, 2011
hotwebscripts hotweb rentalsSQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote...CVE-2010-47037.5 HighJanuary 20, 2011
fxwebdesign com jradioSQL injection vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows...CVE-2010-47027.5 HighJanuary 20, 2011
microsoft windows 7, windows xp, windows 2003 server +2 moreHeap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft...CVE-2010-4701Public exploitEPSS 47.8%7.6 HighJanuary 20, 2011
redhat icedteaThe JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9...CVE-2010-43516.8 MediumJanuary 20, 2011
jwilk ocrodjvuocrodjvu is vulnerable to Arbitrary File Modification via symlink attackCVE-2010-4338Fix available6.2 MediumJanuary 20, 2011
seopanelMultiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to...CVE-2010-4331Public exploit4.3 MediumJanuary 20, 2011
hp linux imaging and printing projectStack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard...CVE-2010-4267Fix availableEPSS 10.8%7.5 HighJanuary 20, 2011
otrsCross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when...CVE-2010-4071Fix available2.6 LowJanuary 20, 2011
rocomotion p board, p diary r, p forum +7 more +9 moreCross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18...CVE-2010-39314.3 MediumJanuary 20, 2011
wayneeseguin ruby version managerRuby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non...CVE-2010-39286.8 MediumJanuary 20, 2011
oracle sun convergenceUnspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect...CVE-2010-44646.4 MediumJanuary 19, 2011
oracle peoplesoft and jdedwards product suiteUnspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and...CVE-2010-44615.5 MediumJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and...CVE-2010-44603.6 LowJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability...CVE-2010-44594.6 MediumJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability,...CVE-2010-44584.1 MediumJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect...CVE-2010-44577.8 HighJanuary 19, 2011
sun java system communications expressUnspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows...CVE-2010-44564.3 MediumJanuary 19, 2011
oracle fusion middlewareUnspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1...CVE-2010-44556.4 MediumJanuary 19, 2011
oracle fusion middleware, weblogic server +1 moreUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0...CVE-2010-44534.3 MediumJanuary 19, 2011
oracle audit vaultUnspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows...CVE-2010-444910.0 HighJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability...CVE-2010-44464.6 MediumJanuary 19, 2011
oracle peoplesoft and jdedwards product suiteUnspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and...CVE-2010-44454.0 MediumJanuary 19, 2011
oracle opensso, sun java system access manager +1 moreUnspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and...CVE-2010-44446.8 MediumJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect...CVE-2010-44434.4 MediumJanuary 19, 2011
sun sunosUnspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect...CVE-2010-44424.4 MediumJanuary 19, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open