Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

← September 2011 2011 / October November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

484 results · Feed

  • Unscored —
    CVE-2011-3887

    Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass in…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3886

    Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a denial of service or possib…

  • Unscored —
    CVE-2011-3883

    Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service …

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3889

    Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3888

    Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a deni…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3880

    Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP heade…

  • Unscored —
    CVE-2011-3875

    Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-a…

  • Unscored —
    CVE-2011-3877

    Cross-site scripting (XSS) vulnerability in the appcache internals page in Google Chrome before 15.0.874.102 allows rem…

  • Unscored —
    CVE-2011-3890

    Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service …

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3881

    WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2845

    Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-4173

    Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers…

  • Unscored —
    CVE-2011-4171

    Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remot…

  • Unscored —
    CVE-2011-4172

    Multiple cross-site scripting (XSS) vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject a…

  • Unscored —
    CVE-2011-3615

    Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote a…

  • Unscored —
    CVE-2011-3984

    Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-3983

    Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-3383

    Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-2655

    Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to exec…

  • Unscored —
    CVE-2011-2656

    Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to exec…

  • Unscored —
    CVE-2011-1478

    The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel b…

  • Unscored —
    CVE-2011-4170

    Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adi…

    empathy Debian
  • Unscored —
    CVE-2011-3163

    HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata informati…

  • Unscored —
    CVE-2011-3635

    Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adi…

    empathy Debian
  • Unscored —
    CVE-2011-1640

    The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Mana…

  • Unscored —
    CVE-2011-2060

    The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(…

  • Unscored —
    CVE-2011-2057

    The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x e…

  • Unscored —
    CVE-2011-2059

    The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain…

  • Unscored —
    CVE-2011-2058

    The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a p…

  • Unscored —
    CVE-2011-2042

    The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote att…

  • Unscored —
    CVE-2011-4026 Public exploit

    SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2011-4024 Public exploit

    Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers …

    ocsinventory-server Debian
  • Unscored —
    CVE-2011-3988

    SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to exec…

  • Unscored —
    CVE-2011-2677

    Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitiv…

  • Unscored —
    CVE-2011-2713

    oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial o…

    libreoffice Debian
  • Unscored —
    CVE-2011-0290

    The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 f…

  • Unscored —
    CVE-2011-4063

    chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not p…

    asterisk Debian
  • Unscored —
    CVE-2011-3340 Public exploit

    SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2010-4967 Public exploit

    SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4966

    Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrar…