CVEs published in April 2011
330 vulnerabilities, 59 critical, 1 exploited.
- 7t igssFormat string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00...10.0 High
- 7t igssMultiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7...10.0 High
- 7t igssDirectory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies...10.0 High
- 7t igssDirectory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7...10.0 High
- realflex realwinMultiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10)...10.0 High
- realflex realwinMultiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build...10.0 High
- ecava integraxorEcava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication...7.5 High
- ibm aixThe LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in...6.8 Medium
- ibm soliddbsolid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47,...9.3 High
- ibm webiUnspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before...10.0 High
- ibm webiMultiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content...4.3 Medium
- aleksey xml security library, apple webkit +1 morexslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products,...5.1 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a...4.9 Medium
- linux kernelfs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll...4.9 Medium
- hp operationsUnspecified vulnerability in HP Operations 9.10 on UNIX platforms allows remote authenticated...5.5 Medium
- hp operationsCross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote...4.3 Medium
- hp hp-uxUnspecified vulnerability in the OS-Core.CORE2-KRN fileset in HP HP-UX B.11.23 and B.11.31 allows...4.4 Medium
- icloudcenter icjobsiteSQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute...7.5 High
- aphpkbSQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb)...6.8 Medium
- aphpkbSQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier...6.8 Medium
- aphpkbMultiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow...7.5 High
- vmware vix api, workstation +1 moreVMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7...6.9 Medium
- cisco secure access control systemThe web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0...5.0 Medium
- opensuseThe aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE...6.9 Medium
- opensuse/etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and...6.3 Medium
- horde groupware, imp +1 moreMultiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3...4.3 Medium
- realnetworks helix mobile server, helix server +1 moreStack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and...9.3 High
- realnetworks helix mobile server, helix server +1 moreFormat string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and...10.0 High
- horde dynamic imp, groupware +1 moreCross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde...4.3 Medium
- horde gollemCross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1...4.3 Medium