CVEs published in April 2011

330 vulnerabilities, 59 critical, 1 exploited.

• mozilla firefox, thunderbird +1 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x... CVE-2011-0081 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19... CVE-2011-0080 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x... CVE-2011-0078 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x... CVE-2011-0077 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x... CVE-2011-0075 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x... CVE-2011-0074 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey +1 more Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not... CVE-2011-0073 Public exploit EPSS 70.9% 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x... CVE-2011-0072 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17,... CVE-2011-0071 5.0 MediumApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x... CVE-2011-0070 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x... CVE-2011-0069 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey +1 more Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not... CVE-2011-0067 5.0 MediumApril 30, 2011
• mozilla firefox, seamonkey +1 more Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and... CVE-2011-0066 10.0 HighApril 30, 2011
• mozilla firefox, seamonkey +1 more Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and... CVE-2011-0065 Public exploit EPSS 74.4% 10.0 HighApril 30, 2011
• wireshark The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses... CVE-2011-1592 4.3 MediumApril 29, 2011
• wireshark Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1... CVE-2011-1591 Public exploitFix available EPSS 41.7% 9.3 HighApril 29, 2011
• wireshark The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly... CVE-2011-1590 Fix available 4.3 MediumApril 29, 2011
• hp systems insight manager Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3... CVE-2011-1543 4.3 MediumApril 29, 2011
• hp systems insight manager Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows... CVE-2011-1542 4.3 MediumApril 29, 2011
• hp system management homepage Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote... CVE-2011-1541 EPSS 12.1% 10.0 HighApril 29, 2011
• hp system management homepage Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote... CVE-2011-1540 9.0 HighApril 29, 2011
• hp performance insight Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41... CVE-2011-1536 5.0 MediumApril 29, 2011
• hp insight control for linux Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux) before 6.3 allows remote... CVE-2011-1535 6.0 MediumApril 29, 2011
• ubuntu language-selector dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not... CVE-2011-0729 7.2 HighApril 29, 2011
• ibm rational build forge IBM Rational Build Forge 7.1.0 uses the HTTP GET method during redirection from the... CVE-2011-1839 5.0 MediumApril 28, 2011
• hp network automation Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote... CVE-2011-1725 5.0 MediumApril 27, 2011
• broadcom output management web viewer Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management... CVE-2011-1719 EPSS 12.0% 9.3 HighApril 27, 2011
• broadcom siteminder The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not... CVE-2011-1718 4.3 MediumApril 27, 2011
• mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or... CVE-2011-1587 Fix available 4.3 MediumApril 27, 2011
• kde sc Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui... CVE-2011-1586 Fix available 5.8 MediumApril 27, 2011
• mediawiki The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges,... CVE-2011-1580 Fix available 3.5 LowApril 27, 2011
• mediawiki The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3... CVE-2011-1579 Fix available 5.8 MediumApril 27, 2011
• mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or... CVE-2011-1578 Fix available 4.3 MediumApril 27, 2011
• baconmap Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers... CVE-2010-4801 Public exploit 6.0 MediumApril 27, 2011
• baconmap SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute... CVE-2010-4800 Public exploit 7.5 HighApril 27, 2011
• chipmunk-scripts pwngame Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled... CVE-2010-4799 Public exploit 6.8 MediumApril 27, 2011
• orangehrm Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to... CVE-2010-4798 Public exploit 6.8 MediumApril 27, 2011
• truworthit flex timesheet Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote... CVE-2010-4797 Public exploit 7.5 HighApril 27, 2011
• phpyun Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute... CVE-2010-4796 7.5 HighApril 27, 2011
• joomlaseller com jscalendar SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for... CVE-2010-4795 Public exploit 7.5 HighApril 27, 2011
• joomlaseller com jscalendar Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar ... CVE-2010-4794 Public exploit 4.3 MediumApril 27, 2011
• site2nite auto e-manager SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to... CVE-2010-4793 Public exploit 7.5 HighApril 27, 2011
• openit overlook Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote... CVE-2010-4792 Public exploit 4.3 MediumApril 27, 2011
• marcusg mg user fotoalbum panel SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG... CVE-2010-4791 Public exploit 7.5 HighApril 27, 2011
• in-mediakg filterftp Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions,... CVE-2010-4790 5.8 MediumApril 27, 2011
• orbeon forms oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms... CVE-2010-3260 6.4 MediumApril 27, 2011
• mediawiki PHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when... CVE-2010-2789 6.8 MediumApril 27, 2011
• mediawiki Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when... CVE-2010-2788 Fix available 2.6 LowApril 27, 2011
• mediawiki api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private... CVE-2010-2787 Fix available 4.3 MediumApril 27, 2011
• konstanty bialkowski libmodplug Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2... CVE-2011-1574 Public exploitFix available EPSS 42.9% 6.8 MediumApril 26, 2011
• Show olderLoading…