Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
March

CVEs published in March 2011

358 vulnerabilities, 28 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

lars hjemli cgit, fedoraproject fedora +1 moreOff-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3...CVE-2011-10275.0 MediumMarch 20, 2011
openldapbind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root...CVE-2011-1025Fix available6.8 MediumMarch 20, 2011
openldapchain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a...CVE-2011-1024Fix available4.6 MediumMarch 20, 2011
phpexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...CVE-2011-0708Public exploit4.3 MediumMarch 20, 2011
phpThe _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...CVE-2011-0421Public exploitFix availableEPSS 13.5%4.3 MediumMarch 20, 2011
mit kerberos 5Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...CVE-2011-0284Fix available7.6 HighMarch 20, 2011
phpThe Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete...CVE-2011-04416.3 MediumMarch 19, 2011
otrsThe (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS)...CVE-2011-1433Fix available5.0 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions,...CVE-2010-4768Fix available6.0 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which...CVE-2010-4767Fix available5.0 MediumMarch 18, 2011
otrsThe AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not...CVE-2010-4766Fix available4.3 MediumMarch 18, 2011
otrsRace condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS)...CVE-2010-4765Fix available4.9 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings...CVE-2010-4764Fix available5.0 MediumMarch 18, 2011
otrsThe ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0...CVE-2010-4763Fix available6.5 MediumMarch 18, 2011
otrsCross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request...CVE-2010-4762Fix available3.5 LowMarch 18, 2011
otrsThe customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0...CVE-2010-4761Fix available4.0 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to...CVE-2010-4760Fix available3.5 LowMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages...CVE-2010-4759Fix available4.0 MediumMarch 18, 2011
otrsinstaller.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field...CVE-2010-4758Fix available1.9 LowMarch 18, 2011
otrsThe S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the...CVE-2009-5057Fix available5.0 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into...CVE-2009-5056Fix available2.1 LowMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit...CVE-2009-5055Fix available3.5 LowMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows...CVE-2008-7283Fix available6.0 MediumMarch 18, 2011
otrsKernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS)...CVE-2008-7282Fix available4.6 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that...CVE-2008-7281Fix available4.3 MediumMarch 18, 2011
otrsKernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2...CVE-2008-7280Fix available5.0 MediumMarch 18, 2011
otrsThe CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote...CVE-2008-7279Fix available6.5 MediumMarch 18, 2011
otrsThe S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0...CVE-2008-7278Fix available5.0 MediumMarch 18, 2011
otrsOpen Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the...CVE-2008-7277Fix available6.5 MediumMarch 18, 2011
otrsKernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a...CVE-2008-7276Fix available4.6 MediumMarch 18, 2011
otrsMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2...CVE-2008-7275Fix available4.3 MediumMarch 18, 2011
phpUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...CVE-2011-11487.5 HighMarch 18, 2011
sco scoofficeserverThe STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering,...CVE-2011-14326.8 MediumMarch 16, 2011
frederik vermeulen netqmailThe STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for...CVE-2011-14316.8 MediumMarch 16, 2011
ipswitch imailThe STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly...CVE-2011-14306.8 MediumMarch 16, 2011
muttMutt does not verify that the smtps server hostname matches the domain name of the subject of an...CVE-2011-1429Fix available5.8 MediumMarch 16, 2011
flashtux weechatWee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that...CVE-2011-1428Fix available5.8 MediumMarch 16, 2011
phpMultiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and...CVE-2011-11537.5 HighMarch 16, 2011
redhat kdelibskio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the...CVE-2011-10944.3 MediumMarch 16, 2011
hp client automation enterpriseUnspecified vulnerability in HP Client Automation Enterprise (aka HPCA or Radia Notify) 5.11, 7.2...CVE-2011-0889EPSS 13.4%10.0 HighMarch 16, 2011
nazgul nostromoDirectory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote...CVE-2011-0751Public exploit7.5 HighMarch 16, 2011
sugarcrmSugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page...CVE-2011-0745Public exploit4.0 MediumMarch 16, 2011
emc avamarUnspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain...CVE-2011-06488.5 HighMarch 16, 2011
emc avamarThe service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1...CVE-2011-04423.5 LowMarch 16, 2011
postfixThe STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6...CVE-2011-0411Fix availableEPSS 15.6%6.8 MediumMarch 16, 2011
rsa access manager serverUnspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote...CVE-2011-03227.5 HighMarch 16, 2011
balbir singh libcgroupThe cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group...CVE-2011-1022Fix available2.1 LowMarch 16, 2011
balbir singh libcgroupHeap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the...CVE-2011-1006Fix available7.2 HighMarch 16, 2011
kodak insiteMultiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers...CVE-2011-1427Public exploit4.3 MediumMarch 15, 2011
digium asterisk, asterisknow, s800i +2 moreMultiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2)...CVE-2011-1147Fix available6.8 MediumMarch 15, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open