VulDB: Archive 2011
Archive
12/31/2011 
Mozilla Firefox HTML5 Engine Drag & Drop cross site scripting
12/29/2011 Microsoft .NET Framework Forms Authentication Ticket Caching unknown vulnerability
12/29/2011 
Microsoft .NET Framework Username Parser privilege escalation
12/29/2011 Microsoft .NET Framework Forms Authentication Redirect
12/28/2011 Python Hash Collision Form Parameter Parser denial of service
12/28/2011 Microsoft .NET Framework ASP.NET Hash denial of service
12/23/2011 FreeBSD pam_ssh privilege escalation
12/23/2011 
FreeBSD telnet/libtelnet/encrypt.c encrypt_keyid() buffer overflow
12/22/2011 Linux Kernel SG_IO SCSI IOCTL privilege escalation
12/21/2011 Google Android Browser IFRAME Rendering spoofing
12/21/2011 IBM Lotus Domino RPC Authentication denial of service
12/21/2011 phpMyAdmin Setup Interface cross site scripting
12/20/2011 VideoLAN VLC Media Player modules/demux/ty.c get_chunk_header() unknown vulnerability
12/20/2011 Mozilla Firefox OGG Video Handler denial of service
12/20/2011 Mozilla Firefox DOM buffer overflow
12/20/2011 Mozilla Firefox SVG accessKey Event Handler privilege escalation
12/20/2011 Mozilla Firefox SVG Element Handler DOMAttrModified buffer overflow
12/20/2011 Mozilla Firefox nsDOMMessageEvent::GetData unknown vulnerability
12/20/2011 Mozilla Firefox YARR Regular Expression Library privilege escalation
12/19/2011 WhatsApp Messenger privilege escalation
12/18/2011 Microsoft Windows Apple Safari win32k.sys buffer overflow
12/16/2011 Adobe Acrobat/Reader PDF Engine buffer overflow [CVE-2011-4369]
12/16/2011 Tor or/buffers.c buf_pullup() buffer overflow
12/16/2011 TYPO3 AbstractController.php Remote File Inclusion
12/14/2011 Linux Kernel arch/x86/kvm/i8254.c create_pit_timer() denial of service
12/14/2011 Nagios XI login.php cross site scripting
12/14/2011 Red Hat JBoss Enterprise Portal Platform cross site scripting
12/14/2011 Red Hat JBoss Enterprise Portal Platform cross site scripting
12/13/2011 Microsoft Windows Phone SMS Service denial of service
12/13/2011 Adobe ColdFusion Remote Development Service cross site scripting
12/13/2011 Microsoft Word Document Parser buffer overflow [CVE-2011-1983]
12/13/2011 Microsoft Windows Media Player ENCDEC.DLL unknown vulnerability
12/13/2011 Microsoft Excel buffer overflow [CVE-2011-3403]
12/13/2011 Microsoft Windows CSRSS privilege escalation
12/13/2011 Microsoft Windows OLE Objects Memory Management buffer overflow
12/13/2011 Microsoft PowerPoint OfficeArt unknown vulnerability [CVE-2011-3413]
12/13/2011 Microsoft Internet Explorer DATIME.DLL privilege escalation [CVE-2011-3397]
12/13/2011 Microsoft Windows Kernel Exception Handler privilege escalation
12/13/2011 Microsoft Windows Active Directory Query buffer overflow
12/13/2011 Microsoft Powerpoint DLL-Loader unknown vulnerability
12/13/2011 Microsoft Office Input Method Editor privilege escalation
12/13/2011 Microsoft Office Publisher buffer overflow
12/13/2011 Microsoft Office buffer overflow [CVE-2011-3411]
12/13/2011 Microsoft Office Publisher unknown vulnerability [CVE-2011-3412]
12/13/2011 Linux Kernel OMAP4 Bridge Networking Interface denial of service
12/13/2011 Microsoft Internet Explorer cross site scripting
12/13/2011 Microsoft Internet Explorer DLL-Loader Directory Traversal [CVE-2011-2019]
12/13/2011 Microsoft Internet Explorer information disclosure [CVE-2011-3404]
12/13/2011 Google Chrome Regex-Modul denial of service [CVE-2011-3903]
12/13/2011 Adobe ColdFusion cross site scripting [CVE-2011-2463]
12/13/2011 Google Chrome libxml2 denial of service [CVE-2011-3905]
12/13/2011 Google Chrome PDF-Parser denial of service [CVE-2011-3906]
12/13/2011 Google Chrome SVG-Parser denial of service [CVE-2011-3908]
12/13/2011 Google Chrome CSS-Parser buffer overflow [CVE-2011-3909]
12/13/2011 Microsoft Internet Explorer unknown vulnerability [CVE-2011-1992]
12/13/2011 Microsoft Excel Record Parser buffer overflow [CVE-2011-3403]
12/13/2011 Microsoft Windows Adctive Directory Query Handler buffer overflow
12/13/2011 Microsoft Windows Kernel Exception Handler Designfehler [CVE-2011-2018]
12/13/2011 Microsoft Windows OLE Objects Property Handler Designfehler [CVE-2011-3400]
12/13/2011 Microsoft Windows CSRSS Device Event Message Handler Designfehler
12/13/2011 Microsoft Windows Media DVR-MS Parser buffer overflow [CVE-2011-3401]
12/13/2011 Microsoft Windows Time ActiveX Control unknown vulnerability
12/13/2011 Microsoft Office OfficeArt Record Parser buffer overflow [CVE-2011-3413]
12/13/2011 Microsoft Office Word Document Parser buffer overflow [CVE-2011-1983]
12/13/2011 Barracuda Web Filter Script Handler cross site scripting
12/12/2011 IBM WebSphere WS ILOG RTS cross site scripting
12/08/2011 Adobe Flash Player buffer overflow [CVE-2011-4693]
12/07/2011 Adobe Acrobat/Reader unknown vulnerability [CVE-2011-2445]
11/22/2011 Microsoft Windows Keyboard Layout win32k.sys denial of service
11/16/2011 Apple Safari WebKit @font-face privilege escalation
11/16/2011 ISC BIND Recursive Query Processor denial of service [CVE-2011-4313]
11/11/2011 Google Chrome unknown vulnerability [CVE-2011-2445]
11/11/2011 Apple iOS unknown vulnerability [CVE-2011-3246]
11/08/2011 Microsoft Windows Active Directory Umgehungs-Angriff [CVE-2011-2014]
11/08/2011 Microsoft Windows True Type Fonts denial of service [CVE-2011-2004]
11/08/2011 Microsoft Windows TCP/IP Reference Counter denial of service
11/08/2011 Apple Mac OS X Mail denial of service
11/04/2011 Microsoft Windows True Type Fonts win32k.sys buffer overflow
11/01/2011 Squid Proxy DNS Reply Handler denial of service [CVE-2011-4096]
10/26/2011 Linux Kernel XFS xfs_readlink() buffer overflow
10/25/2011 Mozilla Bugzilla WebService user.pm information disclosure
10/24/2011 Linux Kernel ext4 Extent Splitting denial of service
10/21/2011 Google Chrome NSS Designfehler [CVE-2011-3640]
10/20/2011 Metasploit Web UI cross site scripting
10/18/2011 Microsoft Windows TrueType Font Handling buffer overflow [CVE-2011-3402]
10/13/2011 Apple TV unknown vulnerability [CVE-2011-0192]
10/13/2011 Apple iOS unknown vulnerability [CVE-2011-0184]
10/13/2011 Apple Safari unknown vulnerability [CVE-2011-2338]
10/13/2011 Apple Mac OS X unknown vulnerability [CVE-2010-0097]
10/12/2011 Apple iTunes unknown vulnerability [CVE-2011-0164]
10/11/2011 Microsoft Host Integration Server denial of service [CVE-2011-2007]
10/11/2011 Microsoft Internet Explorer buffer overflow [CVE-2011-1993]
10/11/2011 Microsoft Windows Driver win32k.sys buffer overflow
10/11/2011 Microsoft Windows Ancillary Function Driver Eingabeungültigkeit
10/11/2011 Microsoft Forefront Unified Access Gateway buffer overflow [CVE-2011-1895]
10/07/2011 RIM BlackBerry Flash Player buffer overflow [CVE-2011-2130]
10/05/2011 Google Chrome buffer overflow [CVE-2011-2876]
09/29/2011 Cisco IOS IP Service Level Agreement Handler denial of service
09/29/2011 Cisco IOS Smart Install unknown vulnerability [CVE-2011-3271]
09/27/2011 Microsoft Windows SSL/TLS IV Designfehler
09/15/2011 Linux Kernel CIFS DFS denial of service [CVE-2011-3363]
09/14/2011 Adobe Acrobat/Reader buffer overflow [CVE-2011-1353]
09/13/2011 Microsoft SharePoint cross site scripting [CVE-2011-0653]
09/13/2011 Microsoft SharePoint XML/XLS Handler Designfehler [CVE-2011-1892]
09/13/2011 Microsoft Office Library Loader Designfehler [CVE-2011-1980]
09/13/2011 Microsoft Excel buffer overflow [CVE-2011-1986]
09/13/2011 Microsoft Windows Library Loader Designfehler [CVE-2011-1991]
09/13/2011 Microsoft Windows WINS Designfehler [CVE-2011-1984]
09/01/2011 Siemens SIMATIC WinCC Flexible Tag Simulator buffer overflow
08/29/2011 Squid Proxy Gopher buffer overflow [CVE-2011-3205]
08/25/2011 Linux Kernel net/socket.c _sys_sendmsg() denial of service
08/24/2011 Linux Kernel CIFSFindNext() denial of service
08/24/2011 Citrix Access Gateway cross site scripting
08/23/2011 Cisco IOS SSH2 Session Handler denial of service [CVE-2011-1624]
08/23/2011 Google Chrome buffer overflow [CVE-2011-2806]
08/22/2011 Pidgin Designfehler [CVE-2011-2943]
08/10/2011 RIM Blackberry PNG/TIFF Image Handler unknown vulnerability [CVE-2010-1205]
08/10/2011 Adobe Flash Player buffer overflow [CVE-2011-2130]
08/09/2011 Microsoft Internet Explorer IFRAME Rendering privilege escalation
08/09/2011 Microsoft .NET Framework Chart Control Designfehler [CVE-2011-1977]
08/09/2011 Microsoft Windows TCP/IP Stack denial of service [CVE-2011-1871]
08/09/2011 Microsoft Windows Client/Server Run-Time Subsystem privilege escalation
08/09/2011 Microsoft Windows DNS Service Domain Lookup denial of service
08/09/2011 Microsoft Windows DNS Service unknown vulnerability [CVE-2011-1966]
08/09/2011 Microsoft Windows Remote Access Service buffer overflow [CVE-2011-1974]
08/09/2011 Microsoft .NET Framework Socket Restriction privilege escalation
08/09/2011 Microsoft Windows Remote Desktop Web Access cross site scripting
08/09/2011 Microsoft Windows Remote Desktop Protocol denial of service [CVE-2011-1968]
08/09/2011 Microsoft Windows File Metadata Parser denial of service [CVE-2011-1971]
08/04/2011 Apple QuickTime buffer overflow [CVE-2011-0186]
08/04/2011 Microsoft Windows denial of service
08/03/2011 Google Chrome buffer overflow [CVE-2011-2358]
07/29/2011 Juniper Secure Access SSL Handler weak encryption [CVE-2009-3555]
07/26/2011 Apple iOS X.509 Certificate Chain Validation Designfehler [CVE-2011-0228]
07/26/2011 Microsoft Internet Explorer Format String [CVE-2011-1257]
07/25/2011 Apple Mac OS X LDAP Authentication weak authentication
07/21/2011 Apple Safari buffer overflow [CVE-2010-1383]
07/12/2011 Microsoft Windows CSRSS Eingabeungültigkeit [CVE-2011-1281]
07/12/2011 Microsoft Windows Bluetooth Driver Object Handler Eingabeungültigkeit
07/12/2011 Microsoft Windows Driver win32k.sys Eingabeungültigkeit
07/04/2011 vsftpd Sources privilege escalation
06/29/2011 Google Chrome unknown vulnerability [CVE-2011-2345]
06/24/2011 Pidgin gdk_pixbuf__gif_image_load() denial of service
06/24/2011 Apple Mac OS X unknown vulnerability [CVE-2010-0740]
06/21/2011 DokuWiki cross site scripting [CVE-2011-2510]
06/20/2011 Perl XML::Atom Module information disclosure [CVE-2012-1102]
06/19/2011 SonicWALL SSL-VPN VirtualOffice Webfrontend cross site scripting
06/15/2011 Adobe Flash Player unknown vulnerability [CVE-2011-2110]
06/15/2011 Microsoft Windows MHTML Handler cross site scripting [CVE-2011-1894]
06/15/2011 Microsoft Internet Explorer unknown vulnerability [CVE-2011-1246]
06/14/2011 Microsoft Windows Distributed File System buffer overflow [CVE-2011-1868]
06/14/2011 Microsoft .NET Framework Array Handler Format String [CVE-2011-0664]
06/14/2011 Microsoft Excel unknown vulnerability [CVE-2011-1272]
06/14/2011 Microsoft Internet Explorer VML Vector Markup Language Handler buffer overflow
06/14/2011 Microsoft Windows Hyper-V VMBus denial of service [CVE-2011-1872]
06/14/2011 Microsoft Windows OLE Automatisation buffer overflow [CVE-2011-0658]
06/14/2011 Microsoft Windows OpenType Font buffer overflow [CVE-2011-1873]
06/14/2011 Microsoft Windows Active Directory cross site scripting [CVE-2011-1264]
06/14/2011 Microsoft Windows SMB Client unknown vulnerability [CVE-2011-1268]
06/14/2011 Microsoft Windows denial of service [CVE-2011-1267]
06/14/2011 Microsoft Windows Ancillary Function Driver Designfehler [CVE-2011-1249]
06/08/2011 Sun Java JDK/JRE/SDK unknown vulnerability [CVE-2011-0786]
06/08/2011 Google Chrome unknown vulnerability [CVE-2011-1808]
06/03/2011 VMware Virtual Infrastructure Client ActiveX Control buffer overflow
05/27/2011 ISC BIND Negative Caching Handler denial of service [CVE-2011-1910]
05/25/2011 Google Chrome buffer overflow [CVE-2011-1801]
05/20/2011 Apache httpd APR apr_fnmatch() denial of service
05/12/2011 NetBSD fnmatch() denial of service
05/12/2011 Apache httpd APR apr_fnmatch() denial of service
05/11/2011 Citrix XenServer denial of service
05/11/2011 FON La Fonera+ denial of service [CVE-2011-1326]
05/10/2011 Microsoft Office Presentation File Parser buffer overflow [CVE-2011-1269]
05/10/2011 Microsoft Powerpoint buffer overflow [CVE-2011-1269]
05/10/2011 Microsoft Windows WINS Service Designfehler [CVE-2011-1248]
05/09/2011 Skype Client Message Processor buffer overflow [CVE-2011-2074]
05/04/2011 WordPress File Upload Umgehungs-Angriff
05/04/2011 Horde IMP Webmail cross site scripting
05/03/2011 VideoLAN VLC Media Player libmodplug buffer overflow
05/03/2011 Adobe Photoshop unknown vulnerability
04/28/2011 Google Chrome buffer overflow [CVE-2011-1304]
04/19/2011 Juniper Works unknown vulnerability
04/12/2011 VideoLAN VLC Media Player MP4 Demuxer unknown vulnerability
04/12/2011 Microsoft Internet Explorer unknown vulnerability [CVE-2011-0094]
04/12/2011 Microsoft Windows JScript/VBScript buffer overflow [CVE-2011-0663]
04/12/2011 Microsoft Windows DNS buffer overflow [CVE-2011-0657]
04/12/2011 Microsoft Windows OpenType Font denial of service [CVE-2011-0034]
04/12/2011 Microsoft Windows Driver win32k.sys buffer overflow
04/12/2011 Microsoft Windows GDI+ buffer overflow [CVE-2011-0041]
04/12/2011 Microsoft .NET Framework JIT Compiler buffer overflow [CVE-2010-3958]
04/12/2011 Microsoft Windows Wordpad unknown vulnerability [CVE-2011-0028]
04/12/2011 Microsoft PowerPoint unknown vulnerability [CVE-2011-0655]
04/12/2011 Microsoft Windows SMB Transaction Parser buffer overflow [CVE-2011-0661]
04/12/2011 Adobe Flash Player SharedObject buffer overflow [CVE-2011-0611]
04/11/2011 VideoLAN VLC Media Player MP4_ReadBox_skcr() buffer overflow
04/07/2011 VideoLAN VLC Media Player libmodplug buffer overflow
04/01/2011 NetBSD IPComp Payload Decompression denial of service [CVE-2011-1547]
04/01/2011 Juniper IVE OS Network Connect Credential Provider privilege escalation
03/30/2011 WebkitGTK+ HTML Render Engine buffer overflow [CVE-2011-1791]
03/25/2011 Google Chrome unknown vulnerability [CVE-2011-1291]
03/24/2011 VideoLAN VLC Media Player Video Dimension buffer overflow
03/24/2011 Apple iOS unknown vulnerability [CVE-2011-0195]
03/22/2011 Apple Mac OS X buffer overflow [CVE-2006-7243]
03/15/2011 Adobe Acrobat/Reader authplay.dll buffer overflow [CVE-2011-0609]
03/15/2011 Adobe Flash Player AVM2 Instruction Sequence Handler Designfehler
03/14/2011 Google Chrome Style Handler buffer overflow [CVE-2011-1290]
03/10/2011 Apple TV unknown vulnerability [CVE-2010-3855]
03/10/2011 Apple iOS unknown vulnerability [CVE-2010-1792]
03/09/2011 Google Chrome unknown vulnerability
03/08/2011 Microsoft Windows DirectShow/Windows Media unknown vulnerability
03/08/2011 Microsoft Windows Remote Desktop Client Designfehler [CVE-2011-0029]
03/03/2011 Apple iTunes unknown vulnerability [CVE-2010-1205]
03/01/2011 Google Chrome buffer overflow [CVE-2010-4751]
02/28/2011 Citrix Secure Gateway unknown vulnerability
02/25/2011 FreePBX config.php cross site scripting
02/25/2011 Foxit Reader ICC Processing buffer overflow [CVE-2011-0332]
02/25/2011 GNU C Library fnmatch() buffer overflow
02/24/2011 Sumatra PDF buffer overflow
02/23/2011 Citrix XenApp/XenDesktop XML Service unknown vulnerability
02/23/2011 ISC BIND IXFR/DDNS Update denial of service [CVE-2011-0414]
02/22/2011 Asterisk PBX UPDTL buffer overflow
02/21/2011 Ruby FileUtils.remove_entry_secure race condition
02/21/2011 Ruby Safe Level #to_s privilege escalation
02/15/2011 Microsoft Windows SMB Browser denial of service
02/15/2011 TYPO3 cross site scripting
02/09/2011 Adobe Flash Player unknown vulnerability [CVE-2011-0558]
02/08/2011 Microsoft Windows JScript/VBScript Engine information disclosure
02/08/2011 Microsoft Windows OpenType Compact Font Format Driver privilege escalation
02/08/2011 Microsoft Windows LSASS unknown vulnerability [CVE-2011-0039]
02/08/2011 Microsoft Windows Kerberos weak authentication [CVE-2011-0091]
02/08/2011 Microsoft Windows Driver win32k.sys Designfehler
02/08/2011 Microsoft Windows Kerberos CRC32 Checksum privilege escalation
02/08/2011 Microsoft Windows CSRSS Logoff privilege escalation [CVE-2011-0030]
02/08/2011 OpenSSL ClientHello Handshake buffer overflow [CVE-2011-0014]
02/08/2011 ProFTPD mod_sftpd denial of service
02/08/2011 Microsoft Excel Shape Data Parser buffer overflow
02/08/2011 IBM Lotus Notes cai URI Handler privilege escalation
02/08/2011 Check Point Endpoint Security Web Directory information disclosure
02/08/2011 Microsoft Powerpoint OfficeArt Container Parser buffer overflow
02/07/2011 Apache Tomcat JVM getLocale() denial of service
02/07/2011 Apache Tomcat HTML Manager cross site scripting [CVE-2010-4476]
02/07/2011 Apache Tomcat ServletContect privilege escalation [CVE-2010-3718]
02/07/2011 OpenSSH Legacy Certificate Handler buffer overflow [CVE-2011-0539]
02/04/2011 Google Chrome unknown vulnerability [CVE-2011-0776]
01/31/2011 Exim Server open_log() race condition
01/29/2011 Microsoft Windows MHTML Handler cross site scripting [CVE-2011-0096]
01/28/2011 IBM DB2 Administration Server receiveDASMessage() buffer overflow
01/28/2011 RealNetworks RealPlayer AVI Header Parser vidplin.dll buffer overflow
01/27/2011 Symantec AntiVirus Alert Originator iao.exe buffer overflow
01/27/2011 Symantec AntiVirus pagehndl.dll buffer overflow
01/27/2011 Symantec AntiVirus IHDNLRSVC.EXE buffer overflow
01/27/2011 Symantec AntiVirus Intel AMS2 buffer overflow
01/27/2011 Symantec AntiVirus AMSLIB.dll AMSSendAlertAct() buffer overflow
01/27/2011 ISC DHCP Message Processor denial of service [CVE-2011-0413]
01/26/2011 Novell GroupWise Internet Agent buffer overflow [CVE-2010-4325]
01/26/2011 Panda Internet Protection Driver APPFLT.SYS buffer overflow
01/26/2011 HP OpenView Storage Data Protector denial of service [CVE-2011-0275]
01/26/2011 Opera Browser Clear All Passwords privilege escalation
01/26/2011 Opera Browser File Handler privilege escalation
01/26/2011 Opera Browser HTTP Handler unknown vulnerability
01/26/2011 Opera Browser opera: Scheme Handler privilege escalation
01/26/2011 Opera Browser Integer Handler Eingabeungültigkeit
01/25/2011 syslog-ng Log File Handler privilege escalation [CVE-2011-0343]
01/25/2011 Linux Kernel dvb_ca_ioctl() buffer overflow
01/25/2011 IBM WebSphere privilege escalation [CVE-2011-0679]
01/25/2011 SAP Crystal Reports Server ActiveX scriptinghelpers.dll privilege escalation
01/25/2011 SAP Crystal Reports Server InfoViewApp cross site scripting
01/21/2011 WordPress StatPressCN Plugin cross site scripting [CVE-2011-0641]
01/21/2011 Linksys WRT54GC Web Management Interface buffer overflow [CVE-2011-0352]
01/20/2011 HP OpenView Storage Data Protector Cell Manager buffer overflow
01/20/2011 IBM WebSphere MQ Message Handler buffer overflow [CVE-2011-0310]
01/19/2011 Oracle PeopleSoft Enterprise PeopleTools Portal unknown vulnerability
01/19/2011 Oracle PeopleSoft Enterprise PeopleTools Security Module denial of service
01/19/2011 Oracle PeopleSoft Enterprise PIA Core Technology unknown vulnerability
01/19/2011 Oracle WebLogic Servlet Container unknown vulnerability [CVE-2010-4437]
01/19/2011 Oracle WebLogic Server Node Manager unknown vulnerability [CVE-2010-3510]
01/19/2011 Citrix Provisioning Services Network Communication Handler buffer overflow
01/19/2011 Oracle Database mdsys.reset_inprog_index() SQL Injection
01/19/2011 Oracle Database Cluster Verify Utility unknown vulnerability
01/19/2011 Oracle Enterprise Manager Grid Control privilege escalation [CVE-2010-3600]
01/19/2011 Oracle Secure Backup mod_ssl unknown vulnerability [CVE-2010-3596]
01/19/2011 Joomla! allCineVid SQL Injection [CVE-2011-0511]
01/19/2011 Oracle OpenOffice unknown vulnerability [CVE-2010-2935]
01/19/2011 Oracle Audit Vault av av.action Eingabeungültigkeit
01/19/2011 Asterisk PBX ast_uri_encode() denial of service
01/12/2011 RIM BlackBerry Enterprise Server PDF Distiller buffer overflow
01/11/2011 Microsoft Windows Data Access Components buffer overflow [CVE-2011-0026]
01/05/2011 Microsoft Windows Thumbnail Bitmap Parser buffer overflow [CVE-2010-3970]
01/03/2011 VideoLAN VLC Media Player Real Demuxer Array Indexing Handler buffer overflow
288 Schwachstellen dargestellt
