CVEs published in September 2011
403 vulnerabilities, 66 critical, 0 exploited.
- ibm rational build forgeIBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity...4.0 Medium
- sage-mozdev sageCross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows...4.3 Medium
- phorumCross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to...4.3 Medium
- phorumCross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers...6.8 Medium
- openttdMultiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service ...4.6 Medium
- openttdMultiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of...7.5 High
- openttdMultiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to...7.5 High
- linux kernel, redhat enterprise linux +1 moreInteger signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel...8.8 High
- linux kernel, f5 arx, big-ip access policy manager +12 more +14 moreThe (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4...9.1 Critical
- linux kernelThe Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event...5.5 Medium
- linux kernelThe do_devinfo_ioctl function in drivers/staging/comedi/comedi_fops.c in the Linux kernel before...4.9 Medium
- linux kernelUntrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in...6.2 Medium
- linux kernel, redhat enterprise linux +1 moreThe qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not...7.8 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 more +4 moreMultiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow...7.2 High
- linux kernelInteger overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39...4.9 Medium
- linux kernelfs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/###...2.1 Low
- linux kernel, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the...4.9 Medium
- bcfg2The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute...9.3 High
- google chrome, microsoft internet explorer, windows +12 more +14 moreThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 Medium
- opera browserOpera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted...4.3 Medium
- geoff wong hammerheadhammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink...3.3 Low
- rsyslogStack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd...5.0 Medium
- sambaThe check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier...1.2 Low
- suse linux enterprise desktop, vpnc +1 moreThe modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux...7.5 High
- linux kernelThe key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel...7.2 High
- linux kernelThe cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to...7.8 High
- ibm openadmin toolMultiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT)...4.3 Medium
- squid-cache squidBuffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0...6.8 Medium
- linux kernelThe skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4...5.7 Medium
- novell cloud managerThe RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not...9.3 High
- ibm websphere application serverDirectory traversal vulnerability in the administration console in IBM WebSphere Application...5.0 Medium
- apple quicktimeApple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause...9.3 High
- gnome gtkUntrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24...9.3 High
- gnome gtkUntrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows...6.9 Medium
- linux kernelMultiple buffer overflows in the si4713_write_econtrol_string function in drivers/media/radio...2.1 Low
nssDebiannss - compromised certificate authorityNo score- ibm javaThe class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a...4.0 Medium
- medtronic paradigm wireless insulin pumpUnspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722...4.0 Medium
- gnome networkmanagerGNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit,...2.1 Low
- fuseCertain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not...3.3 Low
- fusefusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or...3.3 Low
- fusefuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows...3.3 Low
- ibm java, runtimes for java technology +1 moreThe class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java...3.5 Low
- lepton-cms lepton, websitebaker2 websitebaker +1 moreCross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and...4.3 Medium
- juniper idpCross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP...4.3 Medium
- tibco spotfire analytics server, spotfire server +1 moreUnspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x...7.5 High
- tibco spotfire analytics server, spotfire server +1 moreSession fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3...4.3 Medium
- tibco spotfire analytics server, spotfire server +1 moreCross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x...4.3 Medium
- rhythm tcptrackHeap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary...6.8 Medium
- lifesize room appliance softwareThe web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote...7.5 High
- Show moreLoading…