Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

← September 2011 2011 / October November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

484 results · Feed

  • Unscored —
    CVE-2009-5102 Public exploit

    SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2009-5103 Public exploit

    Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2011-1529

    The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 …

    krb5 Debian
  • Unscored —
    CVE-2011-1527

    The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP …

    krb5 Debian
  • Unscored —
    CVE-2011-1528

    The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.…

    krb5 Debian
  • Unscored —
    CVE-2011-4151

    The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4…

    krb5 Debian
  • Unscored —
    CVE-2011-3310 EPSS 15%

    The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management…

  • Unscored —
    CVE-2011-2584

    Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote attackers to access the (1) Encoders and Pu…

  • Unscored —
    CVE-2011-2585

    Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote authenticated users to upload and execute a…

  • Unscored —
    CVE-2011-3550

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3555

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote …

  • Unscored —
    CVE-2011-3545

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earli…

  • Unscored —
    CVE-2011-3521

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and e…

  • Unscored —
    CVE-2011-3556 Public exploit EPSS 76%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Critical 9.8
    CVE-2011-3544 Exploited Public exploit EPSS 97%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2011-3561

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3557

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3516

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earli…

  • Unscored —
    CVE-2011-3548

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3547

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3558

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3554

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3549

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earli…

  • Unscored —
    CVE-2011-3553

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3552

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3551

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3560

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3546

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ea…

  • Unscored —
    CVE-2011-3162 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • Unscored —
    CVE-2011-3294

    Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video …

  • Unscored —
    CVE-2011-3157 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • Unscored —
    CVE-2011-3159 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • Unscored —
    CVE-2011-3158 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • Unscored —
    CVE-2011-3156 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • Unscored —
    CVE-2011-3160 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • Unscored —
    CVE-2011-3161 EPSS 12%

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 al…

  • High 7.5
    CVE-2011-4139

    Django Vulnerable to Cache Poisoning

    Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.

    python-django django Debian PyPI
  • Medium 4.0
    CVE-2011-4136

    Session manipulation in Django

    django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering us…

    python-django django Debian PyPI
  • High 7.5
    CVE-2011-4138

    Django Might Allow CSRF Requests via URL Verification

    The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might al…

    python-django django Debian PyPI
  • High 7.5
    CVE-2011-4137

    Denial of service in django

    The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resour…

    python-django django Debian PyPI