CVEs published in March 2011
358 vulnerabilities, 28 critical, 1 exploited.
- php pearThe installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink...3.3 Low
- wiresharkHeap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0...6.8 Medium
- thingslabo bbs thread, things bbs +1 moreCross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3...4.3 Medium
- ruby-lang rubyThe safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev...5.0 Medium
- ruby-lang rubyThe FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330...6.3 Medium
- vsftpd project vsftpd, canonical ubuntu linux, debian linux +3 more +5 moreThe vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote...4.0 Medium
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreBuffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey...9.3 High
- mozilla firefox, seamonkey +1 moreCross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before...6.8 Medium
- mozilla firefox, seamonkey +1 moreBuffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2...10.0 High
- mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17...10.0 High
- mozilla firefox, seamonkey +1 moreBuffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14...10.0 High
- mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before...10.0 High
- mozilla firefox, seamonkey +1 moreBuffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3...10.0 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not...6.8 Medium
- gnu glibcThe glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated...4.0 Medium
- freebsd, netbsd, openbsd +1 more +3 moreThe (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH...4.0 Medium
- apple mac os x, freebsd, netbsd +1 more +3 moreThe glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and...4.0 Medium
- gplhost domain technologie controlshared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie...4.0 Medium
- gplhost domain technologie controlThe register_user function in client/new_account_form.php in Domain Technologie Control (DTC)...5.0 Medium
- gplhost domain technologie controlDomain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin...5.0 Medium
- gplhost domain technologie controlMultiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow...7.5 High
- simon pamies pywebdavPyWebDAV SQL Injection vulnerability7.5 High
- gnome pango, mozilla firefox +1 moreThe hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and...6.8 Medium
- google chromeGoogle Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 does not properly restrict access to internal extension...7.5 High
- google chromeThe WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a...5.0 Medium
- google chrome, apple iphone os, itunes +1 more +3 moreInteger overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of...7.5 High
- google chromeThe WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a...5.0 Medium
- google chromeGoogle Chrome before 9.0.597.107 does not properly determine device orientation, which allows...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote...6.8 Medium
- google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote...7.5 High
- google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers...7.5 High
- google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle...5.0 Medium
- google chromeGoogle Chrome before 9.0.597.107 does not properly perform SVG rendering, which allows remote...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 does not properly implement key frame rules, which allows remote...7.5 High
- google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS)...7.5 High
- google chromeGoogle Chrome before 9.0.597.107 does not properly implement JavaScript dialogs, which allows...6.8 Medium
- google chrome, apple iphone os, safari +2 moreUnspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof...4.3 Medium
- ibm lotus sametimeCross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime...4.3 Medium
- linux kernel, canonical ubuntu linux +1 moreHeap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux...7.2 High
- linux kernel, canonical ubuntu linux +1 moreThe ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6...4.9 Medium
- linux kernelBuffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2...4.9 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3...2.1 Low
- iij seil\/b1, seil\/b1 firmware, seil\/neu 2fe plus +9 more +11 moreBuffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through...8.3 High
- Show moreLoading…