CVEs published in May 2011

309 vulnerabilities, 65 critical, 0 exploited.

• walrus digit walrack Unspecified vulnerability in WalRack 1.x before 1.1.8 and 2.x before 2.0.6 has unknown impact and... CVE-2011-2215 7.5 HighMay 31, 2011
• 7t igss Unspecified vulnerability in the Open Database Connectivity (ODBC) component in 7T Interactive... CVE-2011-2214 10.0 HighMay 31, 2011
• openssl The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic... CVE-2011-1945 Fix available 2.6 LowMay 31, 2011
• php Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3... CVE-2011-1938 Public exploitFix available EPSS 23.1% 7.5 HighMay 31, 2011
• webmin Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject... CVE-2011-1937 4.3 MediumMay 31, 2011
• wouter verhelst nbd nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a... CVE-2011-1925 Fix available 5.0 MediumMay 31, 2011
• nlnetlabs unbound daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface... CVE-2011-1922 Fix available 4.3 MediumMay 31, 2011
• cisco ios xr Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor... CVE-2011-1651 7.8 HighMay 31, 2011
• cisco content delivery system, content delivery system engine +1 more The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5... CVE-2011-1649 7.8 HighMay 31, 2011
• cisco rvs4000, wrvs4400n, rvs4000 software +1 more +3 more The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x... CVE-2011-1647 5.0 MediumMay 31, 2011
• cisco rvs4000, wrvs4400n, rvs4000 software +1 more +3 more The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x... CVE-2011-1646 9.0 HighMay 31, 2011
• cisco rvs4000, wrvs4400n, rvs4000 software +1 more +3 more The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x... CVE-2011-1645 9.3 HighMay 31, 2011
• autonomy keyview, ibm lotus notes +1 more Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8... CVE-2011-1512 9.3 HighMay 31, 2011
• redhat libvirt libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote... CVE-2011-1486 Fix available 3.3 LowMay 31, 2011
• redhat policykit Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows... CVE-2011-1485 Public exploitFix available 6.9 MediumMay 31, 2011
• walrus digit walrack WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which... CVE-2011-1329 6.8 MediumMay 31, 2011
• autonomy keyview, ibm lotus notes +1 more Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3,... CVE-2011-1218 9.3 HighMay 31, 2011
• ibm lotus notes Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3,... CVE-2011-1217 9.3 HighMay 31, 2011
• ibm lotus notes Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8... CVE-2011-1216 9.3 HighMay 31, 2011
• ibm lotus notes Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8... CVE-2011-1215 9.3 HighMay 31, 2011
• ibm lotus notes Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8... CVE-2011-1214 9.3 HighMay 31, 2011
• ibm lotus notes Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3,... CVE-2011-1213 Public exploit EPSS 33.0% 9.3 HighMay 31, 2011
• cisco ios xr Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock... CVE-2011-0949 7.8 HighMay 31, 2011
• cisco ios xr Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO... CVE-2011-0943 7.8 HighMay 31, 2011
• erlang crypto, ssh, erlang erlang\/otp +2 more The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as... CVE-2011-0766 Fix available 7.8 HighMay 31, 2011
• adobe flash player Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and... CVE-2011-0628 Fix available 9.3 HighMay 31, 2011
• symantec backup exec Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information... CVE-2011-0546 Public exploit 6.5 MediumMay 31, 2011
• citadel modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during... CVE-2011-1756 Fix available 5.0 MediumMay 31, 2011
• jabberd jabberd14 jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which... CVE-2011-1754 Fix available 5.0 MediumMay 31, 2011
• process-one ejabberd, exmpp +1 more expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does... CVE-2011-1753 Fix available 5.0 MediumMay 31, 2011
• apple safari, webkit, chromium project chromium +2 more WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code... CVE-2011-1797 Fix available 9.3 HighMay 29, 2011
• isc bind Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before... CVE-2011-1910 Fix available EPSS 24.6% 5.0 MediumMay 27, 2011
• nlnetlabs unbound Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified... CVE-2009-4008 Fix available 5.0 MediumMay 27, 2011
• tigervnc The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component... CVE-2011-1775 Fix available 5.8 MediumMay 26, 2011
• fedoraproject sssd The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services... CVE-2011-1758 Fix available 3.7 LowMay 26, 2011
• feh project feh feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to... CVE-2010-2246 Public exploitFix available 5.1 MediumMay 26, 2011
• ibm websphere portal The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before... CVE-2011-2173 4.0 MediumMay 26, 2011
• ibm websphere portal Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1... CVE-2011-2172 4.3 MediumMay 26, 2011
• google chrome Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to... CVE-2011-1807 10.0 HighMay 26, 2011
• google chrome Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows... CVE-2011-1806 10.0 HighMay 26, 2011
• google chrome rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0... CVE-2011-1804 7.5 HighMay 26, 2011
• google chrome Unspecified vulnerability in Google Chrome before 11.0.696.71 allows remote attackers to bypass... CVE-2011-1801 5.0 MediumMay 26, 2011
• linux kernel The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6... CVE-2011-1581 Fix available 9.0 HighMay 26, 2011
• ibm web content manager Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated... CVE-2010-4807 3.5 LowMay 26, 2011
• ibm web content manager The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows... CVE-2010-4806 4.0 MediumMay 26, 2011
• linux kernel, redhat enterprise linux +1 more The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly... CVE-2010-4805 Fix available 7.5 HighMay 26, 2011
• linux kernel, redhat enterprise linux, vmware esx +2 more The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly... CVE-2010-4251 Fix available 7.5 HighMay 26, 2011
• google chrome os Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta... CVE-2011-2171 10.0 HighMay 24, 2011
• google chrome os Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent... CVE-2011-2170 4.4 MediumMay 24, 2011
• google chrome os Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a ... CVE-2011-2169 7.2 HighMay 24, 2011
• Show olderLoading…