Skip to content
OpenAdvisories

Archive

September 2011

Vulnerabilities first published in this month (UTC), newest first.

← August 2011 2011 / September October 2011 →
  1. 1 
  2. 219
  3. 3 
  4. 4 
  5. 5 
  6. 618
  7. 7 
  8. 88
  9. 99
  10. 103
  11. 111
  12. 12 
  13. 1312
  14. 145
  15. 1533
  16. 1618
  17. 1738
  18. 18 
  19. 192
  20. 209
  21. 218
  22. 229
  23. 2368
  24. 2467
  25. 25 
  26. 26 
  27. 2725
  28. 2816
  29. 2914
  30. 305
All Critical High Medium Low Exploited only Public exploit

387 results · Feed

  • Unscored —
    CVE-2011-3369

    The add_conversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of…

    etherape Debian
  • Unscored —
    CVE-2011-3580

    IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a …

  • Unscored —
    CVE-2011-3579 Public exploit

    server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2011-3010 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2011-2998

    Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (applicat…

  • Unscored —
    CVE-2011-3232

    YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers …

  • Unscored —
    CVE-2011-3005

    Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows …

  • Unscored —
    CVE-2011-3866

    Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which …

  • Unscored —
    CVE-2011-3003

    Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application cr…

  • Unscored —
    CVE-2011-3002

    Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not v…

  • Unscored —
    CVE-2011-3001

    Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installati…

  • Unscored —
    CVE-2011-3504

    The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to …

    ffmpeg Debian
  • Unscored —
    CVE-2011-3000

    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handl…

  • Unscored —
    CVE-2011-3004

    The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrapp…

  • Unscored —
    CVE-2011-2995

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderb…

  • Unscored —
    CVE-2011-2996

    Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a d…

  • Unscored —
    CVE-2011-2999

    Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handl…

  • Unscored —
    CVE-2011-2372

    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the st…

  • Unscored —
    CVE-2011-2997

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey …

  • Unscored —
    CVE-2011-3865 Public exploit

    Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers…

  • Unscored —
    CVE-2011-3851

    Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject a…

  • Unscored —
    CVE-2011-3863 Public exploit

    Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inje…

  • Unscored —
    CVE-2011-3854

    Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to injec…

  • Unscored —
    CVE-2011-3862 Public exploit

    Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2011-3861 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote atta…

  • Unscored —
    CVE-2011-3858 Public exploit

    Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2011-3855 Public exploit

    Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inj…

  • Unscored —
    CVE-2011-3852 Public exploit

    Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inje…

  • Unscored —
    CVE-2011-3850 Public exploit

    Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to i…

  • Unscored —
    CVE-2011-3853

    Cross-site scripting (XSS) vulnerability in the Hybrid theme before 0.10 for WordPress allows remote attackers to injec…

  • Unscored —
    CVE-2011-3864

    Cross-site scripting (XSS) vulnerability in the The Erudite theme before 2.7.9 for WordPress allows remote attackers to…

  • Unscored —
    CVE-2011-3856 Public exploit

    Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers…

  • Unscored —
    CVE-2011-3857

    Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to in…

  • Unscored —
    CVE-2011-3860 Public exploit

    Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to in…

  • Unscored —
    CVE-2011-3859 Public exploit

    Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inje…

  • Unscored —
    CVE-2011-3694

    The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read applicatio…

  • Unscored —
    CVE-2011-3691

    Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Troja…

  • Unscored —
    CVE-2011-3687

    Multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inj…

  • Unscored —
    CVE-2011-3690

    Untrusted search path vulnerability in PlotSoft PDFill PDF Editor 8.0 allows local users to gain privileges via a Troja…

  • Unscored —
    CVE-2011-3645 Public exploit

    Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights paramete…