Skip to content
OpenAdvisories

Archive

4 October 2011

Vulnerabilities first published on this day (UTC), newest first.

← September 2011 2011 / October /4 November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2011-1221

    Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 1…

  • Unscored —
    CVE-2011-3873

    Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to exec…

  • Unscored —
    CVE-2011-2878

    Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attack…

  • Unscored —
    CVE-2011-2880

    Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2877

    Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-2443 Public exploit EPSS 14%

    Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2011-2879

    Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of …

  • Unscored —
    CVE-2011-2876

    Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2881

    Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to c…

  • Unscored —
    CVE-2011-1572

    Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote …

  • Unscored —
    CVE-2011-3354

    The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a de…

    quassel Debian
  • Unscored —
    CVE-2011-3980

    Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 al…

  • Unscored —
    CVE-2011-3981 Public exploit EPSS 10%

    PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote atta…

  • Unscored —
    CVE-2011-3978

    Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated us…

  • Unscored —
    CVE-2011-3976 Public exploit EPSS 31%

    Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long fil…

  • Unscored —
    CVE-2011-3979 Public exploit

    Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module …

  • Unscored —
    CVE-2011-3977

    Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 al…

  • Medium —
    CVE-2011-2894 Public exploit

    Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

    Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untru…

    org.springframework.security:spring-security-core org.springframework:spring-core Maven