Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

← September 2011 2011 / October November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

484 results · Feed

  • Unscored —
    CVE-2011-2352

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2820

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2816

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2338

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2354

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2815

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2809

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2339

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2814

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2831

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2817

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2356

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2341

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2811

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-2813

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-1247 EPSS 11%

    Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3…

  • High 7.1
    CVE-2011-1985 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2011-1998 EPSS 21%

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2011-1996 Public exploit EPSS 59%

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-1897

    Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Updat…

  • Unscored —
    CVE-2011-1993 EPSS 18%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-1995 EPSS 29%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-1997 EPSS 14%

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2011-1999 Public exploit EPSS 27%

    Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute ar…

  • Unscored —
    CVE-2011-1895 EPSS 11%

    CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1…

  • Unscored —
    CVE-2011-1969 EPSS 17%

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.ja…

  • Unscored —
    CVE-2011-1896

    Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Updat…

  • Unscored —
    CVE-2011-1253 EPSS 13%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly…

  • Unscored —
    CVE-2011-3155

    Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote attackers to bypass intended…

  • High 7.8
    CVE-2011-2005 Exploited Public exploit EPSS 32%

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly vali…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2011-2009

    Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, …

  • Unscored —
    CVE-2011-2002

    win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Wind…

  • Unscored —
    CVE-2011-2007 Public exploit EPSS 23%

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-2012 EPSS 17%

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate sess…

  • Unscored —
    CVE-2011-2011

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-2003 Public exploit EPSS 27%

    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, …

  • Unscored —
    CVE-2011-2000 EPSS 19%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-2008 EPSS 21%

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-2001 EPSS 43%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • High —
    CVE-2011-4030

    Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

    The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability t…

    plone PyPI