Skip to content
OpenAdvisories

Archive

27 October 2011

Vulnerabilities first published on this day (UTC), newest first.

← September 2011 2011 / October /27 November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2011-4004

    Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49…

  • Unscored —
    CVE-2011-3315 Public exploit Scanner template EPSS 26%

    Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x befo…

  • Unscored —
    CVE-2011-3318

    Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2…

  • Unscored —
    CVE-2011-3319

    Buffer overflow in the WRF parsing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 …

  • Unscored —
    CVE-2011-2569

    Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly res…

  • Unscored —
    CVE-2011-4079

    Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a …

    openldap Debian
  • Medium —
    CVE-2011-3869

    Puppet arbitrary file overwrite

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.

    puppet puppet Debian RubyGems
  • Unscored —
    CVE-2011-3848

    Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write…

    puppet Debian
  • Unscored —
    CVE-2011-3872 Public exploit

    Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, whe…

    puppet Debian
  • Medium —
    CVE-2011-3871

    Puppet uses predictable filenames, allowing arbitrary file overwrite

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files.

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2011-3870

    Puppet allows local users to modify the permissions of arbitrary files

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.

    puppet puppet Debian RubyGems