Skip to content
OpenAdvisories

Archive

17 November 2011

Vulnerabilities first published on this day (UTC), newest first.

← October 2011 2011 / November /17 December 2011 →
  1. 145
  2. 254
  3. 317
  4. 412
  5. 5 
  6. 6 
  7. 72
  8. 811
  9. 916
  10. 102
  11. 1127
  12. 124
  13. 13 
  14. 14 
  15. 157
  16. 164
  17. 1710
  18. 18 
  19. 195
  20. 20 
  21. 214
  22. 229
  23. 2319
  24. 2422
  25. 25 
  26. 263
  27. 27 
  28. 2811
  29. 2915
  30. 3010
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Low —
    CVE-2011-4457

    OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled

    OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element.

    com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven
  • Unscored —
    CVE-2011-3900

    Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possib…

  • Medium 6.5
    CVE-2011-4107 Public exploit EPSS 13%

    phpMyAdmin vulnerable to XML external entity (XXE) injection attack

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, …

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-4122 Public exploit

    Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to lo…

  • Unscored —
    CVE-2011-4096 EPSS 37%

    The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause…

  • Unscored —
    CVE-2011-4073

    Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows …

  • Unscored —
    CVE-2011-3380

    Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto…

  • Unscored —
    CVE-2011-3646

    phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an arra…

    phpmyadmin Debian
  • Unscored —
    CVE-2011-3627

    The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors re…

    clamav Debian
  • Unscored —
    CVE-2011-2770

    Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote a…

    man2html Debian