Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

← September 2011 2011 / October November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

484 results · Feed

  • Unscored —
    CVE-2011-3229

    Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript …

  • Unscored —
    CVE-2011-3253

    CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle atta…

  • Unscored —
    CVE-2011-3243

    Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remot…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3432

    The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via…

  • Unscored —
    CVE-2011-3231

    The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the pr…

  • Unscored —
    CVE-2011-3436

    Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before chan…

  • Unscored —
    CVE-2011-3223

    Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2011-3217

    MediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —
    CVE-2011-3430

    The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, doe…

  • Unscored —
    CVE-2011-3435

    Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via…

  • Unscored —
    CVE-2011-3426

    Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary …

  • Unscored —
    CVE-2011-3437

    Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to e…

  • Unscored —
    CVE-2011-3220

    QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remo…

  • Unscored —
    CVE-2011-3259

    The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP …

  • Unscored —
    CVE-2011-3242

    The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of t…

  • Unscored —
    CVE-2011-3214

    IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an…

  • Unscored —
    CVE-2011-3225

    The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the …

  • Unscored —
    CVE-2011-3212

    CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of…

  • Unscored —
    CVE-2011-3431

    The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, whic…

  • Unscored —
    CVE-2011-3245

    The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent u…

  • Unscored —
    CVE-2011-3218

    The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain a…

  • Unscored —
    CVE-2011-3221

    QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remo…

  • Unscored —
    CVE-2011-3226

    Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, al…

  • Unscored —
    CVE-2011-3227

    libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extensio…

  • Unscored —
    CVE-2011-3228

    QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —
    CVE-2011-3215

    The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allo…

  • Unscored —
    CVE-2011-3261

    Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-3213

    The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that …

  • Unscored —
    CVE-2011-3230 Public exploit EPSS 49%

    Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers…

  • Unscored —
    CVE-2011-0259

    CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in…

  • Unscored —
    CVE-2011-3241

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3236

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3219

    Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or…

  • Unscored —
    CVE-2011-3239

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3233

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3252

    Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or…

  • Unscored —
    CVE-2011-3237

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3238

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3244

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3235

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu