CVEs published in March 2011

358 vulnerabilities, 28 critical, 1 exploited.

• foolabs xpdf, t1lib, glyphandcog xpdfreader +2 more Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other... CVE-2011-1554 Fix available 4.3 MediumMarch 31, 2011
• foolabs xpdf, t1lib, glyphandcog xpdfreader +2 more Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX,... CVE-2011-1553 Fix available 4.3 MediumMarch 31, 2011
• foolabs xpdf, t1lib, glyphandcog xpdfreader +2 more t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from... CVE-2011-1552 Fix available EPSS 10.4% 4.3 MediumMarch 31, 2011
• digium asterisk tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1... CVE-2011-1175 Fix available 5.0 MediumMarch 31, 2011
• digium asterisk manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x... CVE-2011-1174 Fix available 5.0 MediumMarch 31, 2011
• cisco nac guest server, nac guest server software +1 more The default configuration of the RADIUS authentication feature on the Cisco Network Admission... CVE-2011-0963 5.0 MediumMarch 31, 2011
• foolabs xpdf, t1lib, glyphandcog xpdfreader +2 more t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an... CVE-2011-0764 Fix available EPSS 13.1% 6.8 MediumMarch 31, 2011
• novell opensuse factory SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web... CVE-2011-1551 6.9 MediumMarch 30, 2011
• gentoo logrotate The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process... CVE-2011-1550 6.3 MediumMarch 30, 2011
• gentoo logrotate The default configuration of logrotate on Gentoo Linux uses root privileges to process files in... CVE-2011-1549 6.3 MediumMarch 30, 2011
• gentoo logrotate The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files... CVE-2011-1548 Fix available 6.3 MediumMarch 30, 2011
• gentoo logrotate The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context... CVE-2011-1155 Fix available 1.9 LowMarch 30, 2011
• gentoo logrotate The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context... CVE-2011-1154 Fix available 6.9 MediumMarch 30, 2011
• gentoo logrotate Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier... CVE-2011-1098 Fix available 1.9 LowMarch 30, 2011
• samba rsync rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows... CVE-2011-1097 Fix available 5.1 MediumMarch 30, 2011
• gnu glibc ** DISPUTED ** ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users... CVE-2009-5064 Fix availableDisputed 6.9 MediumMarch 30, 2011
• nokia e75, e75 firmware +1 more The Nokia E75 phone with firmware before 211.12.01 allows physically proximate attackers to... CVE-2011-1472 7.2 HighMarch 29, 2011
• ibm rational clearcase, rational common licensing, rational clearquest +2 more Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1... CVE-2011-1205 6.9 MediumMarch 29, 2011
• hp diagnostics Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225... CVE-2011-0892 4.3 MediumMarch 29, 2011
• michael hudson-doyle loggerhead Loggerhead XSS via filename CVE-2011-0728 Fix available 3.5 LowMarch 29, 2011
• symantec liveupdate administrator Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate... CVE-2011-1524 Public exploit 4.3 MediumMarch 28, 2011
• emc data protection advisor collector, oracle solaris sparc +1 more EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak... CVE-2011-1420 7.2 HighMarch 28, 2011
• libtiff Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3... CVE-2011-1167 Fix available 6.8 MediumMarch 28, 2011
• adminofsystem wp related posts Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp... CVE-2011-0760 4.3 MediumMarch 28, 2011
• symantec liveupdate administrator Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate... CVE-2011-0545 Public exploit 6.8 MediumMarch 28, 2011
• google picasa Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8... CVE-2011-0458 6.9 MediumMarch 28, 2011
• mahara Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3... CVE-2011-0440 Fix available 5.8 MediumMarch 28, 2011
• mahara Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4... CVE-2011-0439 Fix available 4.3 MediumMarch 28, 2011
• wireshark Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to... CVE-2011-0024 Fix available 9.3 HighMarch 28, 2011
• videolan vlc media player libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to... CVE-2010-3276 Fix available 9.3 HighMarch 28, 2011
• videolan vlc media player libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to... CVE-2010-3275 Public exploitFix available EPSS 75.5% 9.3 HighMarch 28, 2011
• gnome gdm GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of... CVE-2011-0727 Fix available 6.9 MediumMarch 28, 2011
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and... CVE-2010-3695 Public exploitFix available 4.3 MediumMarch 27, 2011
• nss Debian nss - security update DSA-2203-1 Fix available No scoreMarch 26, 2011
• ibm lotus domino The default configuration of the server console in IBM Lotus Domino does not require a password ... CVE-2011-1520 7.2 HighMarch 25, 2011
• ibm lotus domino The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials... CVE-2011-1519 Public exploit 10.0 HighMarch 25, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote... CVE-2011-1296 7.5 HighMarch 25, 2011
• apple safari, google chrome, apple iphone os +2 more WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not... CVE-2011-1295 7.5 HighMarch 25, 2011
• google chrome Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token... CVE-2011-1294 7.5 HighMarch 25, 2011
• google chrome, apple iphone os, itunes +2 more +4 more Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0... CVE-2011-1293 Fix available 7.5 HighMarch 25, 2011
• google chrome, debian linux +1 more Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648... CVE-2011-1292 Fix available 7.5 HighMarch 25, 2011
• google chrome Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote... CVE-2011-1291 7.5 HighMarch 25, 2011
• hp discovery\&dependency mapping inventory HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30... CVE-2011-0890 5.0 MediumMarch 25, 2011
• preprojects pre online tests generator SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro... CVE-2010-4776 Public exploit 7.5 HighMarch 23, 2011
• nicholas thompson relevant content The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not... CVE-2010-4775 5.0 MediumMarch 23, 2011
• auracms SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute... CVE-2010-4774 Public exploit 7.5 HighMarch 23, 2011
• hitachi eur form client, eur form service, ucosminexus eur form service +2 more Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (*... CVE-2010-4773 10.0 HighMarch 23, 2011
• matteoiammarrone s-cms Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers... CVE-2010-4772 Public exploit 4.3 MediumMarch 23, 2011
• matteoiammarrone s-cms SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute... CVE-2010-4771 Public exploit 7.5 HighMarch 23, 2011
• commodityrentals dvd rentals script SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote... CVE-2010-4770 Public exploit 7.5 HighMarch 23, 2011
• Show olderLoading…