Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
February

CVEs published in February 2011

376 vulnerabilities, 141 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle sun microsystems sunscreen firewallMultiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen...CVE-2011-0902Public exploit6.9 MediumFebruary 7, 2011
erick woods terminal server clientMultiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in...CVE-2011-0901Public exploit6.8 MediumFebruary 7, 2011
erick woods terminal server clientStack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server...CVE-2011-0900Public exploit6.8 MediumFebruary 7, 2011
johan lindskog aes encryption moduleThe AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release,...CVE-2011-08995.0 MediumFebruary 7, 2011
videolan vlc media playerdemux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier...CVE-2011-0531Public exploitFix availableEPSS 41.9%9.3 HighFebruary 7, 2011
videolan vlc media playerThe StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the...CVE-2011-0522Public exploitFix availableEPSS 51.5%6.8 MediumFebruary 7, 2011
topazsystems sigplus pro activex controlMultiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and...CVE-2011-03249.3 HighFebruary 7, 2011
topazsystems sigplus pro activex controlTopaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows...CVE-2011-03239.3 HighFebruary 7, 2011
oracle passlogix v-go self-service password reset and oemPasslogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate...CVE-2010-45066.2 MediumFebruary 7, 2011
redhat icedteaIcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify...CVE-2011-00256.8 MediumFebruary 4, 2011
google chromeRace condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary...CVE-2011-07846.8 MediumFebruary 4, 2011
google chrome, debian linux +1 moreUnspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote...CVE-2011-07834.3 MediumFebruary 4, 2011
google chromeGoogle Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the...CVE-2011-07825.0 MediumFebruary 4, 2011
google chromeGoogle Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has...CVE-2011-07817.5 HighFebruary 4, 2011
google chromeThe PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print...CVE-2011-07806.8 MediumFebruary 4, 2011
google chrome, debian linux +1 moreGoogle Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which...CVE-2011-07795.0 MediumFebruary 4, 2011
google chromeGoogle Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might...CVE-2011-07787.5 HighFebruary 4, 2011
google chromeUse-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause...CVE-2011-07777.5 HighFebruary 4, 2011
google chromeThe sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote...CVE-2011-07765.0 MediumFebruary 4, 2011
pivotxpivotx/modules/module_image.php in PivotX 2.2.2 allows remote attackers to obtain sensitive...CVE-2011-07755.0 MediumFebruary 4, 2011
pivotxPivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request...CVE-2011-07745.0 MediumFebruary 4, 2011
pivotxCross-site scripting (XSS) vulnerability in pivotx/modules/module_image.php in PivotX before 2.2...CVE-2011-0773Public exploit4.3 MediumFebruary 4, 2011
pivotxMultiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions...CVE-2011-0772Public exploit4.3 MediumFebruary 4, 2011
janrain rpxThe Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a...CVE-2011-07716.8 MediumFebruary 4, 2011
tibco enterprise message service, rendezvous, runtime agent +3 more +5 moreMultiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message...CVE-2011-06497.2 HighFebruary 4, 2011
mediawikiMultiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes...CVE-2011-05377.5 HighFebruary 4, 2011
mj2 majordomo 2Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo...CVE-2011-0049Public exploitEPSS 95.4%5.0 MediumFebruary 4, 2011
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to...CVE-2011-0047Fix available4.3 MediumFebruary 4, 2011
tsugio okamoto lhaBuffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service ...CVE-2004-06946.8 MediumFebruary 4, 2011
plone, redhat conga, luci +2 morePlone Privilege Escalation VulnerabilityCVE-2011-0720Fix available7.5 HighFebruary 3, 2011
smartySmarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified...CVE-2010-4727Fix available10.0 HighFebruary 3, 2011
smartyUnspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and...CVE-2010-4726Fix available10.0 HighFebruary 3, 2011
smartySmarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php...CVE-2010-4725Fix available10.0 HighFebruary 3, 2011
smartyMultiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have...CVE-2010-4724Fix available10.0 HighFebruary 3, 2011
smartySmarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2)...CVE-2010-4723Fix available9.3 HighFebruary 3, 2011
smartyUnspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and...CVE-2010-4722Fix available10.0 HighFebruary 3, 2011
smartySmarty Does Not Consider Umask Values When Setting PermissionsCVE-2009-5054Fix available7.5 HighFebruary 3, 2011
smartyUnspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute...CVE-2009-5053Fix available7.5 HighFebruary 3, 2011
smartyMultiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack...CVE-2009-5052Fix available10.0 HighFebruary 3, 2011
lockon ec-cubeEC-CUBE XSS VulnerabilitiesCVE-2011-0451Fix available4.3 MediumFebruary 3, 2011
cisco tandberg endpoint, tandberg personal video unit, tandberg personal video unit software +2 moreThe default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal...CVE-2011-0354Public exploitEPSS 14.0%10.0 HighFebruary 3, 2011
ibm db2IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not...CVE-2011-07576.5 MediumFebruary 2, 2011
cisco webex meeting centerStack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before...CVE-2010-32706.8 MediumFebruary 2, 2011
cisco webex advanced recording format player, webex recording format player +1 moreMultiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced...CVE-2010-3269EPSS 11.4%9.3 HighFebruary 2, 2011
cisco webex advanced recording format player, webex recording format player +1 moreMultiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format...CVE-2010-30449.3 HighFebruary 2, 2011
cisco webex advanced recording format player, webex recording format player +1 moreMultiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format...CVE-2010-30439.3 HighFebruary 2, 2011
cisco webex advanced recording format player, webex recording format player +1 moreMultiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format...CVE-2010-30429.3 HighFebruary 2, 2011
cisco webex advanced recording format player, webex recording format player +1 moreMultiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format...CVE-2010-30419.3 HighFebruary 2, 2011
phpInteger overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context...CVE-2011-07555.0 MediumFebruary 2, 2011
phpThe SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4...CVE-2011-07544.4 MediumFebruary 2, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open