Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
March

CVEs published in March 2011

358 vulnerabilities, 28 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

redhat libvirtlibvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read...CVE-2011-1146Fix available6.9 MediumMarch 15, 2011
phpInteger overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to...CVE-2011-1092Public exploitEPSS 17.9%7.5 HighMarch 15, 2011
linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 moreRace condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core...CVE-2011-06955.7 MediumMarch 15, 2011
adobe acrobat, air, flash player +4 more +6 moreUnspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X,...CVE-2011-0609In KEVPublic exploitFix availableEPSS 63.5%7.8 HighMarch 15, 2011
e107Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to...CVE-2011-04574.3 MediumMarch 15, 2011
arthurdejong nss-pam-ldapdnslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found...CVE-2011-04386.8 MediumMarch 15, 2011
mj2 majordomo 2The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote...CVE-2011-0063Public exploitEPSS 85.5%5.0 MediumMarch 15, 2011
zaal tgtDouble free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon...CVE-2011-0001Fix available5.0 MediumMarch 15, 2011
e107Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote...CVE-2010-47574.3 MediumMarch 15, 2011
apache tomcatApache Tomcat does not follow ServletSecurity annotationsCVE-2011-1419Fix available5.8 MediumMarch 14, 2011
pidginlibymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1)...CVE-2011-1091Fix available4.0 MediumMarch 14, 2011
apache tomcatApache Tomcat allows remote attackers to bypass intended access restrictionsCVE-2011-1088Fix available5.8 MediumMarch 14, 2011
hp power managerMultiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier...CVE-2011-02804.3 MediumMarch 14, 2011
apple tv, iphone os, tvos +2 moreThe stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking...CVE-2011-14185.0 MediumMarch 11, 2011
apple safari, webkit +1 moreWebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the...CVE-2011-01692.6 LowMarch 11, 2011
apple safari, webkit +1 moreThe windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to...CVE-2011-0167Public exploit4.3 MediumMarch 11, 2011
apple safari, webkit +1 moreThe HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted...CVE-2011-01665.8 MediumMarch 11, 2011
apple safari, webkit, iphone os +2 moreWebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle...CVE-2011-01634.3 MediumMarch 11, 2011
apple tv, iphone os, tvos +2 moreWi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking...CVE-2011-01627.8 HighMarch 11, 2011
apple safari, webkit, iphone os +2 moreWebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the...CVE-2011-01614.3 MediumMarch 11, 2011
apple safari, webkit, iphone os +2 moreWebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle...CVE-2011-01605.0 MediumMarch 11, 2011
apple iphone osThe Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the...CVE-2011-01595.0 MediumMarch 11, 2011
apple iphone osMobileSafari in Apple iOS before 4.3 does not properly implement application launching through...CVE-2011-01584.3 MediumMarch 11, 2011
apple webkit, iphone os +1 moreWebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or...CVE-2011-01577.5 HighMarch 11, 2011
apple webkit, rim blackberry torch 9800, blackberry torch 9800 firmware +2 moreInteger overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with...CVE-2011-129010.0 HighMarch 11, 2011
apple mac os x, iphone os, mac os x server +2 moreInteger overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple...CVE-2011-14176.8 MediumMarch 11, 2011
rim blackberry torch 9800, blackberry torch 9800 firmware +1 moreThe Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to...CVE-2011-14165.0 MediumMarch 11, 2011
otrswebscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to...CVE-2011-0456Fix available7.5 HighMarch 11, 2011
openslp, vmware esx, esxi +2 moreThe extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision...CVE-2010-3609Public exploitEPSS 17.2%5.0 MediumMarch 11, 2011
google chromeGoogle Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X...CVE-2011-14135.0 MediumMarch 11, 2011
google chromeGoogle V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a...CVE-2011-12867.5 HighMarch 11, 2011
google chromeThe regular-expression functionality in Google Chrome before 10.0.648.127 does not properly...CVE-2011-12857.5 HighMarch 11, 2011
google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 10.0.648.127 does not properly handle attributes, which allows remote...CVE-2011-12046.8 MediumMarch 11, 2011
google chrome, xmlsoft libxslt +1 moreThe xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in...CVE-2011-1202Fix available4.3 MediumMarch 11, 2011
google chromeThe context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote...CVE-2011-12017.5 HighMarch 11, 2011
google chromeGoogle Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable...CVE-2011-12006.8 MediumMarch 11, 2011
google chromeGoogle Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote...CVE-2011-11997.5 HighMarch 11, 2011
google chromeThe video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a...CVE-2011-11987.5 HighMarch 11, 2011
google chromeThe OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to...CVE-2011-11967.5 HighMarch 11, 2011
google chromeUse-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to...CVE-2011-11957.5 HighMarch 11, 2011
google chromeMultiple unspecified vulnerabilities in Google Chrome before 10.0.648.127 allow remote attackers...CVE-2011-11945.0 MediumMarch 11, 2011
google chromeGoogle V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the...CVE-2011-11937.5 HighMarch 11, 2011
google chromeGoogle Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows...CVE-2011-11925.0 MediumMarch 11, 2011
google chromeUse-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to...CVE-2011-11917.5 HighMarch 11, 2011
google chromeGoogle Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls...CVE-2011-11865.0 MediumMarch 11, 2011
google chromeGoogle Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the...CVE-2011-11857.5 HighMarch 11, 2011
wordpresswp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote...CVE-2011-0701Fix available4.0 MediumMarch 11, 2011
wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote...CVE-2011-0700Fix available3.5 LowMarch 11, 2011
gnu patchDirectory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted...CVE-2010-4651Fix available5.8 MediumMarch 11, 2011
microsoft internet explorerUnspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers...CVE-2011-1347EPSS 28.0%8.8 HighMarch 10, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open