Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

← September 2011 2011 / October November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

484 results · Feed

  • Unscored —
    CVE-2011-3324

    The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows…

  • Unscored —
    CVE-2011-3326

    The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2011-3323

    The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-…

  • High —
    CVE-2011-3587 Public exploit EPSS 78%

    Zope Command Execution Vulnerability

    Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

    zope2 PyPI
  • Unscored —
    CVE-2011-3599

    The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random modu…

    libcrypt-dsa-perl Debian
  • Unscored —
    CVE-2011-3327

    Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 all…

  • Unscored —
    CVE-2011-3325

    ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via…

  • Unscored —
    CVE-2011-2675

    Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2011-2189 Public exploit EPSS 18%

    net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cl…

    vsftpd Debian
  • Unscored —
    CVE-2010-4950

    SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-4928 Public exploit

    Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allo…

  • Unscored —
    CVE-2010-4957

    SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote atta…

  • Unscored —
    CVE-2010-4947 Public exploit

    Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject a…

  • Unscored —
    CVE-2010-4954 Public exploit

    SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-4943 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2010-4952

    SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2010-4922 Public exploit

    Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-4958

    SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4933 Public exploit

    SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-4949 Public exploit

    Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPur…

  • Unscored —
    CVE-2010-4945 Public exploit

    SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-4938 Public exploit

    SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4935 Public exploit

    SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-4934 Public exploit

    SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4956

    Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allow…

  • Unscored —
    CVE-2010-4937 Public exploit

    Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to e…

  • Unscored —
    CVE-2010-4955 Public exploit

    SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2010-4959 Public exploit

    SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute …

  • Unscored —
    CVE-2010-4951

    Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 all…

  • Unscored —
    CVE-2010-4941 Public exploit

    SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2010-4927 Public exploit

    SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote att…

  • Unscored —
    CVE-2010-4948 Public exploit

    PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote atta…

  • Unscored —
    CVE-2010-4925 Public exploit

    SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute…

  • Unscored —
    CVE-2010-4932

    Cross-site scripting (XSS) vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2010-4931 Public exploit EPSS 16%

    Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2010-4924 Public exploit

    PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to e…

  • High —
    CVE-2010-4961

    Webkit PDFs for TYPO3 has SQL Injection vulnerability

    SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    dmk/webkitpdf Packagist
  • Unscored —
    CVE-2010-4960

    Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9…

  • Unscored —
    CVE-2010-4936

    SQL injection vulnerability in the Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2010-4946 Public exploit

    SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands …