Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

109 results · Clear filters · Feed

  • Unscored —
    CVE-2011-3315 Public exploit EPSS 26%

    Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x befo…

  • Unscored —
    CVE-2011-3872 Public exploit

    Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, whe…

  • Unscored —
    CVE-2011-4026 Public exploit

    SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2011-4024 Public exploit

    Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers …

  • Unscored —
    CVE-2011-3340 Public exploit

    SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2010-4967 Public exploit

    SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-5102 Public exploit

    SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2009-5103 Public exploit

    Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2011-3556 Public exploit EPSS 76%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Critical 9.8
    CVE-2011-3544 Exploited Public exploit EPSS 97%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2011-4062 Public exploit

    Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or…

  • Unscored —
    CVE-2011-3230 Public exploit EPSS 49%

    Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers…

  • High 7.1
    CVE-2011-1985 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2011-1996 Public exploit EPSS 59%

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-1999 Public exploit EPSS 27%

    Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute ar…

  • High 7.8
    CVE-2011-2005 Exploited Public exploit EPSS 32%

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly vali…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2011-2007 Public exploit EPSS 23%

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-2003 Public exploit EPSS 27%

    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, …

  • High —
    CVE-2011-3587 Public exploit EPSS 78%

    Zope Command Execution Vulnerability

    Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

  • Unscored —
    CVE-2011-2189 Public exploit EPSS 18%

    net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cl…

  • Unscored —
    CVE-2010-4928 Public exploit

    Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allo…

  • Unscored —
    CVE-2010-4947 Public exploit

    Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject a…

  • Unscored —
    CVE-2010-4954 Public exploit

    SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-4943 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2010-4922 Public exploit

    Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-4933 Public exploit

    SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-4949 Public exploit

    Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPur…

  • Unscored —
    CVE-2010-4945 Public exploit

    SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-4938 Public exploit

    SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4935 Public exploit

    SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-4934 Public exploit

    SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4937 Public exploit

    Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to e…

  • Unscored —
    CVE-2010-4955 Public exploit

    SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2010-4959 Public exploit

    SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute …

  • Unscored —
    CVE-2010-4941 Public exploit

    SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2010-4927 Public exploit

    SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote att…

  • Unscored —
    CVE-2010-4948 Public exploit

    PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote atta…

  • Unscored —
    CVE-2010-4925 Public exploit

    SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute…

  • Unscored —
    CVE-2010-4931 Public exploit EPSS 16%

    Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2010-4924 Public exploit

    PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to e…