Skip to content
OpenAdvisories

Archive

4 November 2011

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —
    CVE-2011-1513 Public exploit

    Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installa…

  • Unscored —
    CVE-2011-4066 Public exploit

    SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary …

  • Unscored —

    Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-i…

  • High 8.8
    CVE-2011-3402 Exploited EPSS 78%

    Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Win…

    KEV Oct 6, 2025
  • Unscored —

    Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspeci…

  • Unscored —

    Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers t…

  • Unscored —

    SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2011-3171 Scanner template

    Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterpris…

  • Unscored —

    Unspecified vulnerability in HP-UX Containers (formerly HP-UX Secure Resource Partitions (SRP)) A.03.00, A.03.00.002, a…

  • Unscored —

    The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and p…

  • Unscored —

    Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Fact…

  • Unscored —

    The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files …