Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 290 291 292 293 294 295 296 297 298 299 [300] 301 302 303 304 305 306 307 308 309 310 ... Result(s) : 8831

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
2.6 2011-06-14 CVE-2011-0865 cve Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows r...
2.6 2011-06-14 CVE-2011-2477 cve Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitra...
2.1 2011-06-14 CVE-2011-1943 cve The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate p...
2.1 2011-06-06 CVE-2011-2146 cve mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESX...
3.5 2011-06-06 CVE-2011-1949 cve Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web ...
1.5 2011-06-02 CVE-2011-1637 cve Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileg...
2.6 2011-05-31 CVE-2011-1945 cve The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher sui...
3.3 2011-05-31 CVE-2011-1486 cve libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to repo...
3.7 2011-05-26 CVE-2011-1758 cve The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authenti...
3.5 2011-05-26 CVE-2010-4807 cve Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service (infinite recursive query) via unspecified ve...
3.5 2011-05-24 CVE-2011-1424 cve The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localO...
3.3 2011-05-23 CVE-2011-1920 cve The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##...
3.6 2011-05-20 CVE-2011-2147 cve Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local...
3.6 2011-05-20 CVE-2011-1784 cve The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/r...
2.1 2011-05-20 CVE-2011-1327 cve The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users...
2.1 2011-05-16 CVE-2011-1828 cve usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the Unmo...
3.5 2011-05-13 CVE-2011-1405 cve Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail ...
2.1 2011-05-13 CVE-2011-1840 cve The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which al...
2.6 2011-05-13 CVE-2011-1772 cve Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject ...
2.1 2011-05-13 CVE-2011-0995 cve The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local user...
Page(s) : 1 ... 290 291 292 293 294 295 296 297 298 299 [300] 301 302 303 304 305 306 307 308 309 310 ... Result(s) : 8831