Skip to content
OpenAdvisories

Archive

September 2011

Vulnerabilities first published in this month (UTC), newest first.

← August 2011 2011 / September October 2011 →
  1. 1 
  2. 219
  3. 3 
  4. 4 
  5. 5 
  6. 618
  7. 7 
  8. 88
  9. 99
  10. 103
  11. 111
  12. 12 
  13. 1312
  14. 145
  15. 1533
  16. 1618
  17. 1738
  18. 18 
  19. 192
  20. 209
  21. 218
  22. 229
  23. 2368
  24. 2467
  25. 25 
  26. 26 
  27. 2725
  28. 2816
  29. 2914
  30. 305
All Critical High Medium Low Exploited only Public exploit

75 results · Clear filters · Feed

  • Unscored —
    CVE-2011-3579 Public exploit

    server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2011-3010 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2011-3865 Public exploit

    Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers…

  • Unscored —
    CVE-2011-3863 Public exploit

    Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inje…

  • Unscored —
    CVE-2011-3862 Public exploit

    Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2011-3861 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote atta…

  • Unscored —
    CVE-2011-3858 Public exploit

    Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2011-3855 Public exploit

    Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inj…

  • Unscored —
    CVE-2011-3852 Public exploit

    Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inje…

  • Unscored —
    CVE-2011-3850 Public exploit

    Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to i…

  • Unscored —
    CVE-2011-3856 Public exploit

    Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers…

  • Unscored —
    CVE-2011-3860 Public exploit

    Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to in…

  • Unscored —
    CVE-2011-3859 Public exploit

    Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inje…

  • Unscored —
    CVE-2011-3645 Public exploit

    Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights paramete…

  • Unscored —
    CVE-2010-4845 Public exploit

    Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2010-4852 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2010-4849 Public exploit

    SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-4851 Public exploit

    Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-4846 Public exploit

    SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-4843 Public exploit

    SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execut…

  • Unscored —
    CVE-2010-4847 Public exploit

    SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-4844 Public exploit

    SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-4842 Public exploit

    SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remot…

  • Unscored —
    CVE-2010-4850 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2011-3713 Public exploit

    cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the…

  • Unscored —
    CVE-2011-2544 Public exploit

    Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier …

  • Unscored —
    CVE-2011-2543 Public exploit EPSS 12%

    Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote…

  • Unscored —
    CVE-2011-2938 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers t…

  • Unscored —
    CVE-2011-3360 Public exploit EPSS 35%

    Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain p…

    wireshark Debian
  • Unscored —
    CVE-2011-3483 Public exploit

    Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed c…

    wireshark Debian
  • Unscored —
    CVE-2011-3575 Public exploit EPSS 11%

    Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote…

  • Unscored —
    CVE-2011-2841 Public exploit

    Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, …

  • Unscored —
    CVE-2011-3499 Public exploit EPSS 15%

    Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption…

  • Unscored —
    CVE-2011-3501 Public exploit

    Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2011-3497 Public exploit EPSS 57%

    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via th…

  • Unscored —
    CVE-2011-3495 Public exploit EPSS 10%

    Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote atta…

  • Unscored —
    CVE-2011-3496 Public exploit EPSS 14%

    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell m…

  • Unscored —
    CVE-2011-3502 Public exploit

    The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable f…

  • Unscored —
    CVE-2011-3498 Public exploit

    Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial…

  • Unscored —
    CVE-2011-3492 Public exploit EPSS 71%

    Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denia…