Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
January

CVEs published in January 2011

390 vulnerabilities, 74 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla bugzillaBugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x...CVE-2010-45687.5 HighJanuary 28, 2011
mozilla bugzillaBugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 does not...CVE-2010-45674.3 MediumJanuary 28, 2011
apache openofficeHeap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-4643EPSS 10.1%9.3 HighJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-4253EPSS 10.1%9.3 HighJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moresoffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the...CVE-2010-36896.9 MediumJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moreMultiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in...CVE-2010-3454EPSS 10.3%9.3 HighJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moreThe WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x...CVE-2010-34539.3 HighJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-3452EPSS 10.3%9.3 HighJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-3451EPSS 10.3%9.3 HighJanuary 26, 2011
apache openoffice, canonical ubuntu linux, debian linux +2 moreMultiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow...CVE-2010-3450EPSS 10.7%9.3 HighJanuary 26, 2011
anserv php low bidsSQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute...CVE-2011-0646Public exploit7.5 HighJanuary 25, 2011
phpcms 2008SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute...CVE-2011-0645Public exploit7.5 HighJanuary 25, 2011
phpcms 2008SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows...CVE-2011-0644Public exploit7.5 HighJanuary 25, 2011
phplinkdirectory php link directoryCross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link...CVE-2011-0643Public exploit6.8 MediumJanuary 25, 2011
network-13 n-13 newsCross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0...CVE-2011-0642Public exploit4.3 MediumJanuary 25, 2011
heart5 statpresscnMultiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN...CVE-2011-06414.3 MediumJanuary 25, 2011
videolan vlc media playerMultiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player...CVE-2011-0021Fix available9.3 HighJanuary 25, 2011
linux kernelThe pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly...CVE-2010-42562.1 LowJanuary 25, 2011
udev project udevThe default configuration of udev on Linux does not warn the user before enabling additional...CVE-2011-0640Fix available6.9 MediumJanuary 25, 2011
apple mac os xApple Mac OS X does not properly warn the user before enabling additional Human Interface Device ...CVE-2011-06396.9 MediumJanuary 25, 2011
microsoft windowsMicrosoft Windows does not properly warn the user before enabling additional Human Interface...CVE-2011-06386.9 MediumJanuary 25, 2011
ibm aixThe FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before...CVE-2011-06374.9 MediumJanuary 25, 2011
hp openview storage data protector cell managerBuffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote...CVE-2011-0273EPSS 13.4%9.3 HighJanuary 25, 2011
menalto galleryUnrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery...CVE-2010-43536.0 MediumJanuary 25, 2011
fedorahosted sssdThe pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD...CVE-2010-4341Fix available2.1 LowJanuary 25, 2011
citrix xenThe fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms,...CVE-2010-4255Fix available6.1 MediumJanuary 25, 2011
linux-pamThe pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a...CVE-2010-4708Fix available7.2 HighJanuary 24, 2011
linux-pamThe check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and...CVE-2010-4707Fix available4.9 MediumJanuary 24, 2011
linux-pamThe pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1...CVE-2010-4706Fix available4.9 MediumJanuary 24, 2011
collabnet scrumworksCollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the...CVE-2011-04105.0 MediumJanuary 24, 2011
cisco linksys wrt54gc router, linksys wrt54gc router firmware +1 moreBuffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with...CVE-2011-03527.8 HighJanuary 24, 2011
hp business availability center, business service management +1 moreCross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7...CVE-2011-02744.3 MediumJanuary 24, 2011
gnome pangoHeap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2...CVE-2011-0020Public exploitFix availableEPSS 18.9%7.6 HighJanuary 24, 2011
lunascapeUntrusted search path vulnerability in Lunascape before 6.4.0 allows local users to gain...CVE-2010-39276.9 MediumJanuary 24, 2011
linux-pampam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the...CVE-2010-3853Fix available6.9 MediumJanuary 24, 2011
linux-pamThe (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges...CVE-2010-3435Fix available4.7 MediumJanuary 24, 2011
linux-pamThe privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM ...CVE-2010-3431Fix available1.9 LowJanuary 24, 2011
linux-pamThe privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM ...CVE-2010-3430Fix available4.7 MediumJanuary 24, 2011
linux-pamThe run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1...CVE-2010-3316Fix available3.3 LowJanuary 24, 2011
nvidia cuda toolkitThe (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer...CVE-2011-06362.1 LowJanuary 22, 2011
simploo cmsStatic code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated...CVE-2011-0635Public exploit6.0 MediumJanuary 22, 2011
miloslav trmac libuserlibuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts...CVE-2011-0002Fix available6.4 MediumJanuary 22, 2011
ffmpegInteger overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the...CVE-2010-47059.3 HighJanuary 22, 2011
ffmpeglibavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers...CVE-2010-4704Fix available4.3 MediumJanuary 22, 2011
linux kernelfs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack...CVE-2010-4243Public exploit4.9 MediumJanuary 22, 2011
citrix xenThe vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux ...CVE-2010-42385.5 MediumJanuary 22, 2011
libfuse project libfuseFUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary...CVE-2010-3879Public exploitFix available5.8 MediumJanuary 22, 2011
bestpractical rtBest Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm...CVE-2011-0009Fix available4.3 MediumJanuary 22, 2011
microsoft windows xp, windows 2003 server, windows 7 +3 more +5 moreThe kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a...CVE-2010-2743Public exploitEPSS 14.6%7.2 HighJanuary 20, 2011
gallarific php photo gallery scriptSQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and...CVE-2011-0519Public exploit7.5 HighJanuary 20, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open