Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
April

CVEs published in April 2011

330 vulnerabilities, 59 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...CVE-2011-06767.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06757.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06747.2 HighApril 13, 2011
microsoft windows xpwin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain...CVE-2011-06737.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06727.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06717.2 HighApril 13, 2011
microsoft internet explorerMicrosoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1...CVE-2011-1245EPSS 16.7%4.3 MediumApril 13, 2011
microsoft internet explorerMicrosoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content...CVE-2011-1244EPSS 15.1%5.8 MediumApril 13, 2011
microsoft windows xpThe Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows...CVE-2011-1243EPSS 29.3%9.3 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06707.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06677.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06667.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06657.2 HighApril 13, 2011
microsoft jscript, vbscript +1 moreMultiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6...CVE-2011-0663EPSS 26.2%9.3 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06627.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreThe SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...CVE-2011-0661EPSS 44.6%10.0 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreThe SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1...CVE-2011-0660EPSS 16.6%9.3 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreDNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2011-0657EPSS 62.5%7.5 HighApril 13, 2011
microsoft office, office compatibility pack, open xml file format converter +4 more +6 moreMicrosoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac;...CVE-2011-0656EPSS 29.6%9.3 HighApril 13, 2011
microsoft office, office compatibility pack, open xml file format converter +4 more +6 moreMicrosoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format...CVE-2011-0655EPSS 22.6%9.3 HighApril 13, 2011
microsoft officeUntrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007...CVE-2011-0107EPSS 11.1%9.3 HighApril 13, 2011
microsoft excel, office, open xml file format converter +2 moreMicrosoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for...CVE-2011-0105Public exploitEPSS 70.2%9.3 HighApril 13, 2011
microsoft excel, office, open xml file format converter +2 moreMicrosoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format...CVE-2011-0104Public exploitEPSS 53.4%9.3 HighApril 13, 2011
microsoft excel, office, open xml file format converter +2 moreMicrosoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format...CVE-2011-0103EPSS 25.5%9.3 HighApril 13, 2011
microsoft excelMicrosoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of...CVE-2011-0101EPSS 30.0%9.3 HighApril 13, 2011
microsoft excel, excel viewer, office +2 more +4 moreInteger signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004...CVE-2011-0098EPSS 30.5%9.3 HighApril 13, 2011
microsoft excel, excel viewer, office +2 more +4 moreInteger underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008...CVE-2011-0097EPSS 31.6%9.3 HighApril 13, 2011
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to...CVE-2011-0094EPSS 21.9%9.3 HighApril 13, 2011
microsoft office, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003...CVE-2011-0041Public exploitEPSS 28.2%9.3 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreStack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in...CVE-2011-0034EPSS 27.9%9.3 HighApril 13, 2011
microsoft windows xp, windows server 2003 +1 moreWordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in...CVE-2011-0028EPSS 23.6%9.3 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 morefxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server...CVE-2010-3974EPSS 18.5%7.6 HighApril 13, 2011
microsoft .net frameworkThe x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not...CVE-2010-3958EPSS 23.6%9.3 HighApril 13, 2011
ibm websphere application serverIBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x...CVE-2011-16836.8 MediumApril 13, 2011
tincan phplistMultiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow...CVE-2011-1682Public exploit4.3 MediumApril 13, 2011
kevinmehall pithosPreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config...CVE-2011-1500Fix available2.1 LowApril 13, 2011
roy marples dhcpcddhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell...CVE-2011-09966.8 MediumApril 13, 2011
tincan phplistMultiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote...CVE-2011-0748Public exploit6.8 MediumApril 13, 2011
zyxel o2 dsl router classicCross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2...CVE-2011-07464.3 MediumApril 13, 2011
adobe acrobat, air, flash player +5 more +7 moreAdobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12...CVE-2011-0611In KEVPublic exploitFix availableEPSS 99.4%8.8 HighApril 13, 2011
mono, novell moonlight +1 moreUse-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is...CVE-2011-09925.8 MediumApril 13, 2011
videolan vlc media playerHeap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer...CVE-2011-1684Fix available6.8 MediumApril 12, 2011
perlThe (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x...CVE-2011-1487Public exploitFix availableEPSS 10.6%5.0 MediumApril 11, 2011
mark pilgrim feedparserfeedparser Cross-site Scripting vulnerabilityCVE-2011-1158Fix available4.3 MediumApril 11, 2011
mark pilgrim feedparserfeedparser Cross-site Scripting vulnerabilityCVE-2011-1157Fix available4.3 MediumApril 11, 2011
mark pilgrim feedparserfeedparser denial of service vulnerabilityCVE-2011-1156Fix available5.0 MediumApril 11, 2011
mark pilgrim feedparserfeedparser Cross-site Scripting vulnerabilityCVE-2009-5065Public exploitFix available4.3 MediumApril 11, 2011
vmware open-vm-toolsvmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and...CVE-2011-1681Fix available3.3 LowApril 10, 2011
ncpfsncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed...CVE-2011-16804.4 MediumApril 10, 2011
ncpfsncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2)...CVE-2011-16793.3 LowApril 10, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open