By publication date

Exploited and new serious CVEs: January 2011

68 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2010-4669Proof of concept	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Smicrosoft · windows 2003 server · CWE-399 Pre-auth Denial of service	High7.8	—	29.1%	Jan 7, 2011
34Monitor	CVE-2010-2642No exploit	Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possit1lib · t1lib · CWE-119 pre-auth RCE Memory safety	High7.6	—	14.2%	Jan 7, 2011
40Plan	CVE-2010-3847Weaponized	elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a valuegnu · glibc · CWE-59 Local privilege escalation	Medium6.9	—	9.4%	Jan 7, 2011
40Plan	CVE-2010-3856Weaponized	ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT envignu · glibc · CWE-264 Local privilege escalation	High7.2	—	11.1%	Jan 7, 2011
46Plan	CVE-2010-4538Proof of concept	Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a wireshark · wireshark · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	28.9%	Jan 7, 2011
35Monitor	CVE-2010-4543Proof of concept	Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote agimp · gimp · CWE-787 pre-auth RCE Memory safety	High7.5	—	16.2%	Jan 7, 2011
41Plan	CVE-2011-0346No exploit	Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackemicrosoft · internet explorer · CWE-399 pre-auth RCE	High8.1	—	31.0%	Jan 7, 2011
44Plan	CVE-2011-0347No exploit	Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via microsoft · internet explorer Pre-auth	Critical9.3	—	22.2%	Jan 7, 2011
25Monitor	CVE-2010-4645Proof of concept	strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent atphp · php · CWE-189 Pre-auth Denial of service	Medium5.0	—	15.1%	Jan 10, 2011
49Plan	CVE-2011-0404Weaponized	Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers tonetsupport · netsupport manager agent · CWE-119 pre-auth RCE Memory safety	High7.5	—	64.7%	Jan 10, 2011
46Plan	CVE-2011-0406Proof of concept	Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long requeswellintech · kingview · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	21.3%	Jan 10, 2011
20Monitor	CVE-2010-3678Proof of concept	Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations withmysql · mysql · CWE-399 Denial of service	Medium4.0	—	12.2%	Jan 11, 2011
20Monitor	CVE-2010-3679Proof of concept	Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments tomysql · mysql · CWE-399 Denial of service	Medium4.0	—	12.2%	Jan 11, 2011
20Monitor	CVE-2010-3680Proof of concept	Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tamysql · mysql Denial of service	Medium4.0	—	12.2%	Jan 11, 2011
20Monitor	CVE-2010-3681Proof of concept	Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by mysql · mysql Denial of service	Medium4.0	—	12.2%	Jan 11, 2011
19Monitor	CVE-2010-3682Proof of concept	Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) bymysql · mysql Denial of service	Medium4.0	—	11.4%	Jan 11, 2011
20Monitor	CVE-2010-3683Proof of concept	Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remysql · mysql Denial of service	Medium4.0	—	12.2%	Jan 11, 2011
47Plan	CVE-2011-0026No exploit	Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2,microsoft · data access components · CWE-189 pre-auth RCE	Critical9.3	—	34.3%	Jan 11, 2011
53Plan	CVE-2011-0027Proof of concept	Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory almicrosoft · data access components · CWE-20 pre-auth RCE	Critical9.3	—	54.3%	Jan 11, 2011
32Monitor	CVE-2010-4051Proof of concept	The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attgnu · glibc Pre-auth Denial of service	Medium5.0	—	39.9%	Jan 13, 2011
35Monitor	CVE-2010-4052Proof of concept	Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2gnu · glibc · CWE-399 Pre-auth Denial of service	Medium5.0	—	51.2%	Jan 13, 2011
45Plan	CVE-2011-0261No exploit	Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to hp · openview network node manager pre-auth RCE	Critical10.0	—	15.8%	Jan 13, 2011
45Plan	CVE-2011-0262No exploit	Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53hp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	17.1%	Jan 13, 2011
45Plan	CVE-2011-0263No exploit	Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remothp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	17.1%	Jan 13, 2011
45Plan	CVE-2011-0264No exploit	Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbihp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	17.1%	Jan 13, 2011
45Plan	CVE-2011-0265No exploit	Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary hp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	16.5%	Jan 13, 2011
61This week	CVE-2011-0266Weaponized	Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary hp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	70.1%	Jan 13, 2011
61This week	CVE-2011-0267Weaponized	Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute ahp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	71.6%	Jan 13, 2011
45Plan	CVE-2011-0268No exploit	Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary hp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	15.6%	Jan 13, 2011
45Plan	CVE-2011-0269No exploit	Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary hp · openview network node manager · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	16.5%	Jan 13, 2011
45Plan	CVE-2011-0270No exploit	Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to executhp · openview network node manager · CWE-134 pre-auth RCE	Critical10.0	—	16.3%	Jan 13, 2011
30Monitor	CVE-2009-5018Proof of concept	Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via catb · gif2png · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	10.9%	Jan 14, 2011
47Plan	CVE-2010-4335Weaponized	The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to mocakephp · cakephp · CWE-20 pre-auth RCE	High7.5	—	55.2%	Jan 14, 2011
45Plan	CVE-2010-4566Weaponized	The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTcitrix · access gateway pre-auth RCE	Critical9.3	—	27.7%	Jan 14, 2011
44Plan	CVE-2011-0272No exploit	Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 50hp · loadrunner pre-auth RCE	Critical10.0	—	13.4%	Jan 18, 2011
34Monitor	CVE-2011-0489Proof of concept	The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modobjectivity · objectivity\/db · CWE-287 Pre-auth Auth bypass	High7.5	—	12.5%	Jan 18, 2011
42Plan	CVE-2010-2632Proof of concept	Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.sun · sunos Pre-auth Denial of service	High7.8	—	35.0%	Jan 19, 2011
41Plan	CVE-2010-3591Proof of concept	Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackersoracle · fusion middleware Pre-auth	Critical9.3	—	11.8%	Jan 19, 2011
35Monitor	CVE-2010-3595Proof of concept	Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackersoracle · fusion middleware Pre-auth	High7.8	—	11.9%	Jan 19, 2011
42Plan	CVE-2010-3599Proof of concept	Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackersoracle · fusion middleware pre-auth RCE	Critical9.4	—	16.1%	Jan 19, 2011
53Plan	CVE-2010-3600Weaponized	Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grioracle · database server pre-auth RCE	High7.5	—	76.6%	Jan 19, 2011
53Plan	CVE-2010-4417Weaponized	Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.oracle · beehive pre-auth RCE	High7.5	—	76.3%	Jan 19, 2011
44Plan	CVE-2010-4435Proof of concept	Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, relsun · sunos Pre-auth	Critical10.0	—	14.1%	Jan 19, 2011
33Monitor	CVE-2010-4267No exploit	Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9hp · linux imaging and printing project · CWE-119 pre-auth RCE Memory safety	High7.5	—	10.8%	Jan 20, 2011
44Plan	CVE-2010-4701Proof of concept	Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 imicrosoft · windows 2003 server · CWE-119 pre-auth RCE Memory safety	High7.6	—	47.8%	Jan 20, 2011
46Plan	CVE-2011-0499Weaponized	Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows uverytools · videospirit lite · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	31.0%	Jan 20, 2011
46Plan	CVE-2011-0500Weaponized	Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisteverytools · videospirit lite · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	30.7%	Jan 20, 2011
42Plan	CVE-2011-0501Proof of concept	Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remusanim · music animation machine midi player · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	16.2%	Jan 20, 2011
40Plan	CVE-2011-0514Weaponized	The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with ahp · data protector manager · CWE-119 Pre-auth Memory safety Denial of service	Medium5.0	—	48.8%	Jan 20, 2011
49Plan	CVE-2011-0517Weaponized	Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to sielcosistemi · winlog pro · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	40.4%	Jan 20, 2011
40Plan	CVE-2011-0518Weaponized	Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers lotuscms · fraise · CWE-22 pre-auth RCE Path traversal	Medium5.1	—	15.8%	Jan 20, 2011
40Plan	CVE-2010-2743Weaponized	The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keybomicrosoft · windows 2003 server Local privilege escalation	High7.2	—	14.5%	Jan 20, 2011
36Monitor	CVE-2011-0020Proof of concept	Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earliepango · pango · CWE-119 pre-auth RCE Memory safety	High7.6	—	18.9%	Jan 24, 2011
41Plan	CVE-2011-0273No exploit	Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute arbitrary code via unshp · openview storage data protector cell manager · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.3%	Jan 24, 2011
35Monitor	CVE-2010-4709Proof of concept	Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of serautomatedsolutions · modbus\/tcp master opc server · CWE-119 pre-auth RCE Memory safety	High7.6	—	16.1%	Jan 28, 2011
43Plan	CVE-2010-4326No exploit	Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execunovell · groupwise · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	10.2%	Jan 28, 2011
39Monitor	CVE-2010-2777Proof of concept	Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF novell · groupwise · CWE-119 RCE Memory safety	Critical9.0	—	10.3%	Jan 28, 2011
40Plan	CVE-2010-3450No exploit	Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary fiapache · openoffice · CWE-22 Pre-auth Path traversal	Critical9.3	—	10.7%	Jan 28, 2011
40Plan	CVE-2010-3451No exploit	Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of serviceapache · openoffice · CWE-416 pre-auth RCE Memory safety	Critical9.3	—	10.2%	Jan 28, 2011
40Plan	CVE-2010-3452No exploit	Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of serviceapache · openoffice · CWE-416 pre-auth RCE Memory safety	Critical9.3	—	10.2%	Jan 28, 2011
40Plan	CVE-2010-3454No exploit	Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow reapache · openoffice · CWE-193 pre-auth RCE	Critical9.3	—	10.2%	Jan 28, 2011
40Plan	CVE-2010-4253No exploit	Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (aapache · openoffice · CWE-787 pre-auth RCE Memory safety	Critical9.3	—	10.1%	Jan 28, 2011
40Plan	CVE-2010-4643No exploit	Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (aapache · openoffice · CWE-787 pre-auth RCE Memory safety	Critical9.3	—	10.1%	Jan 28, 2011
44Plan	CVE-2010-4711Proof of concept	Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote atnovell · groupwise · CWE-399 pre-auth RCE	Critical10.0	—	13.5%	Jan 31, 2011
28Monitor	CVE-2010-4715Proof of concept	Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before novell · groupwise · CWE-22 Pre-auth Path traversal	Medium5.0	—	28.2%	Jan 31, 2011
38Monitor	CVE-2011-0096Proof of concept	The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Goldmicrosoft · windows 2003 server · CWE-79 Pre-auth XSS	Medium6.1	—	46.8%	Jan 31, 2011
47Plan	CVE-2010-0111Weaponized	HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as symantec · antivirus · CWE-20 pre-auth RCE	Critical9.3	—	34.5%	Jan 31, 2011
41Plan	CVE-2011-0413No exploit	The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remoteisc · dhcp · CWE-20 Pre-auth Denial of service	High7.8	—	32.9%	Jan 31, 2011

CVE-2010-4669
40Plan
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows S
HighCVSS 7.8Proof of conceptEPSS 29%
- Pre-auth
- Denial of service
microsoft · windows 2003 serverJan 7, 2011
CVE-2010-2642
34Monitor
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possi
HighCVSS 7.6No exploitEPSS 14%
- pre-auth RCE
- Memory safety
t1lib · t1libJan 7, 2011
CVE-2010-3847
40Plan
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value
MediumCVSS 6.9WeaponizedEPSS 9%
- Local privilege escalation
gnu · glibcJan 7, 2011
CVE-2010-3856
40Plan
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT envi
HighCVSS 7.2WeaponizedEPSS 11%
- Local privilege escalation
gnu · glibcJan 7, 2011
CVE-2010-4538
46Plan
Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a
CriticalCVSS 9.3Proof of conceptEPSS 28%
- pre-auth RCE
- Memory safety
wireshark · wiresharkJan 7, 2011
CVE-2010-4543
35Monitor
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote a
HighCVSS 7.5Proof of conceptEPSS 16%
- pre-auth RCE
- Memory safety
gimp · gimpJan 7, 2011
CVE-2011-0346
41Plan
Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attacke
HighCVSS 8.1No exploitEPSS 31%
- pre-auth RCE
microsoft · internet explorerJan 7, 2011
CVE-2011-0347
44Plan
Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via
CriticalCVSS 9.3No exploitEPSS 22%
- Pre-auth
microsoft · internet explorerJan 7, 2011
CVE-2010-4645
25Monitor
strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent at
MediumCVSS 5.0Proof of conceptEPSS 15%
- Pre-auth
- Denial of service
php · phpJan 10, 2011
CVE-2011-0404
49Plan
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to
HighCVSS 7.5WeaponizedEPSS 64%
- pre-auth RCE
- Memory safety
netsupport · netsupport manager agentJan 10, 2011
CVE-2011-0406
46Plan
Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long reques
CriticalCVSS 10.0Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
wellintech · kingviewJan 10, 2011
CVE-2010-3678
20Monitor
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with
MediumCVSS 4.0Proof of conceptEPSS 12%
- Denial of service
mysql · mysqlJan 11, 2011
CVE-2010-3679
20Monitor
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to
MediumCVSS 4.0Proof of conceptEPSS 12%
- Denial of service
mysql · mysqlJan 11, 2011
CVE-2010-3680
20Monitor
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary ta
MediumCVSS 4.0Proof of conceptEPSS 12%
- Denial of service
mysql · mysqlJan 11, 2011
CVE-2010-3681
20Monitor
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by
MediumCVSS 4.0Proof of conceptEPSS 12%
- Denial of service
mysql · mysqlJan 11, 2011
CVE-2010-3682
19Monitor
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by
MediumCVSS 4.0Proof of conceptEPSS 11%
- Denial of service
mysql · mysqlJan 11, 2011
CVE-2010-3683
20Monitor
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows re
MediumCVSS 4.0Proof of conceptEPSS 12%
- Denial of service
mysql · mysqlJan 11, 2011
CVE-2011-0026
47Plan
Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2,
CriticalCVSS 9.3No exploitEPSS 34%
- pre-auth RCE
microsoft · data access componentsJan 11, 2011
CVE-2011-0027
53Plan
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory al
CriticalCVSS 9.3Proof of conceptEPSS 54%
- pre-auth RCE
microsoft · data access componentsJan 11, 2011
CVE-2010-4051
32Monitor
The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent att
MediumCVSS 5.0Proof of conceptEPSS 39%
- Pre-auth
- Denial of service
gnu · glibcJan 13, 2011
CVE-2010-4052
35Monitor
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2
MediumCVSS 5.0Proof of conceptEPSS 51%
- Pre-auth
- Denial of service
gnu · glibcJan 13, 2011
CVE-2011-0261
45Plan
Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to
CriticalCVSS 10.0No exploitEPSS 15%
- pre-auth RCE
hp · openview network node managerJan 13, 2011
CVE-2011-0262
45Plan
Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53
CriticalCVSS 10.0No exploitEPSS 17%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0263
45Plan
Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remot
CriticalCVSS 10.0No exploitEPSS 17%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0264
45Plan
Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbi
CriticalCVSS 10.0No exploitEPSS 17%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0265
45Plan
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary
CriticalCVSS 10.0No exploitEPSS 16%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0266
61This week
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary
CriticalCVSS 10.0WeaponizedEPSS 70%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0267
61This week
Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute a
CriticalCVSS 10.0WeaponizedEPSS 71%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0268
45Plan
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary
CriticalCVSS 10.0No exploitEPSS 15%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0269
45Plan
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary
CriticalCVSS 10.0No exploitEPSS 16%
- pre-auth RCE
- Memory safety
hp · openview network node managerJan 13, 2011
CVE-2011-0270
45Plan
Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execut
CriticalCVSS 10.0No exploitEPSS 16%
- pre-auth RCE
hp · openview network node managerJan 13, 2011
CVE-2009-5018
30Monitor
Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via
MediumCVSS 6.8Proof of conceptEPSS 10%
- pre-auth RCE
- Memory safety
catb · gif2pngJan 14, 2011
CVE-2010-4335
47Plan
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to mo
HighCVSS 7.5WeaponizedEPSS 55%
- pre-auth RCE
cakephp · cakephpJan 14, 2011
CVE-2010-4566
45Plan
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NT
CriticalCVSS 9.3WeaponizedEPSS 27%
- pre-auth RCE
citrix · access gatewayJan 14, 2011
CVE-2011-0272
44Plan
Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 50
CriticalCVSS 10.0No exploitEPSS 13%
- pre-auth RCE
hp · loadrunnerJan 18, 2011
CVE-2011-0489
34Monitor
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to mod
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- Auth bypass
objectivity · objectivity\/dbJan 18, 2011
CVE-2010-2632
42Plan
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.
HighCVSS 7.8Proof of conceptEPSS 35%
- Pre-auth
- Denial of service
sun · sunosJan 19, 2011
CVE-2010-3591
41Plan
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers
CriticalCVSS 9.3Proof of conceptEPSS 11%
- Pre-auth
oracle · fusion middlewareJan 19, 2011
CVE-2010-3595
35Monitor
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers
HighCVSS 7.8Proof of conceptEPSS 11%
- Pre-auth
oracle · fusion middlewareJan 19, 2011
CVE-2010-3599
42Plan
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers
CriticalCVSS 9.4Proof of conceptEPSS 16%
- pre-auth RCE
oracle · fusion middlewareJan 19, 2011
CVE-2010-3600
53Plan
Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Gri
HighCVSS 7.5WeaponizedEPSS 76%
- pre-auth RCE
oracle · database serverJan 19, 2011
CVE-2010-4417
53Plan
Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.
HighCVSS 7.5WeaponizedEPSS 76%
- pre-auth RCE
oracle · beehiveJan 19, 2011
CVE-2010-4435
44Plan
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, rel
CriticalCVSS 10.0Proof of conceptEPSS 14%
- Pre-auth
sun · sunosJan 19, 2011
CVE-2010-4267
33Monitor
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9
HighCVSS 7.5No exploitEPSS 10%
- pre-auth RCE
- Memory safety
hp · linux imaging and printing projectJan 20, 2011
CVE-2010-4701
44Plan
Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 i
HighCVSS 7.6Proof of conceptEPSS 47%
- pre-auth RCE
- Memory safety
microsoft · windows 2003 serverJan 20, 2011
CVE-2011-0499
46Plan
Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows u
CriticalCVSS 9.3WeaponizedEPSS 31%
- pre-auth RCE
- Memory safety
verytools · videospirit liteJan 20, 2011
CVE-2011-0500
46Plan
Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assiste
CriticalCVSS 9.3WeaponizedEPSS 30%
- pre-auth RCE
- Memory safety
verytools · videospirit liteJan 20, 2011
CVE-2011-0501
42Plan
Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted re
CriticalCVSS 9.3Proof of conceptEPSS 16%
- pre-auth RCE
- Memory safety
musanim · music animation machine midi playerJan 20, 2011
CVE-2011-0514
40Plan
The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a
MediumCVSS 5.0WeaponizedEPSS 48%
- Pre-auth
- Memory safety
- Denial of service
hp · data protector managerJan 20, 2011
CVE-2011-0517
49Plan
Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to
CriticalCVSS 9.3WeaponizedEPSS 40%
- pre-auth RCE
- Memory safety
sielcosistemi · winlog proJan 20, 2011
CVE-2011-0518
40Plan
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers
MediumCVSS 5.1WeaponizedEPSS 15%
- pre-auth RCE
- Path traversal
lotuscms · fraiseJan 20, 2011
CVE-2010-2743
40Plan
The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keybo
HighCVSS 7.2WeaponizedEPSS 14%
- Local privilege escalation
microsoft · windows 2003 serverJan 20, 2011
CVE-2011-0020
36Monitor
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlie
HighCVSS 7.6Proof of conceptEPSS 18%
- pre-auth RCE
- Memory safety
pango · pangoJan 24, 2011
CVE-2011-0273
41Plan
Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute arbitrary code via uns
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
hp · openview storage data protector cell managerJan 24, 2011
CVE-2010-4709
35Monitor
Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of ser
HighCVSS 7.6Proof of conceptEPSS 16%
- pre-auth RCE
- Memory safety
automatedsolutions · modbus\/tcp master opc serverJan 28, 2011
CVE-2010-4326
43Plan
Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execu
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
- Memory safety
novell · groupwiseJan 28, 2011
CVE-2010-2777
39Monitor
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF
CriticalCVSS 9.0Proof of conceptEPSS 10%
- RCE
- Memory safety
novell · groupwiseJan 28, 2011
CVE-2010-3450
40Plan
Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary fi
CriticalCVSS 9.3No exploitEPSS 10%
- Pre-auth
- Path traversal
apache · openofficeJan 28, 2011
CVE-2010-3451
40Plan
Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service
CriticalCVSS 9.3No exploitEPSS 10%
- pre-auth RCE
- Memory safety
apache · openofficeJan 28, 2011
CVE-2010-3452
40Plan
Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service
CriticalCVSS 9.3No exploitEPSS 10%
- pre-auth RCE
- Memory safety
apache · openofficeJan 28, 2011
CVE-2010-3454
40Plan
Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow re
CriticalCVSS 9.3No exploitEPSS 10%
- pre-auth RCE
apache · openofficeJan 28, 2011
CVE-2010-4253
40Plan
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a
CriticalCVSS 9.3No exploitEPSS 10%
- pre-auth RCE
- Memory safety
apache · openofficeJan 28, 2011
CVE-2010-4643
40Plan
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a
CriticalCVSS 9.3No exploitEPSS 10%
- pre-auth RCE
- Memory safety
apache · openofficeJan 28, 2011
CVE-2010-4711
44Plan
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote at
CriticalCVSS 10.0Proof of conceptEPSS 13%
- pre-auth RCE
novell · groupwiseJan 31, 2011
CVE-2010-4715
28Monitor
Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before
MediumCVSS 5.0Proof of conceptEPSS 28%
- Pre-auth
- Path traversal
novell · groupwiseJan 31, 2011
CVE-2011-0096
38Monitor
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold
MediumCVSS 6.1Proof of conceptEPSS 46%
- Pre-auth
- XSS
microsoft · windows 2003 serverJan 31, 2011
CVE-2010-0111
47Plan
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as
CriticalCVSS 9.3WeaponizedEPSS 34%
- pre-auth RCE
symantec · antivirusJan 31, 2011
CVE-2011-0413
41Plan
The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote
HighCVSS 7.8No exploitEPSS 32%
- Pre-auth
- Denial of service
isc · dhcpJan 31, 2011