Skip to content
OpenAdvisories

Archive

November 2011

Vulnerabilities first published in this month (UTC), newest first.

← October 2011 2011 / November December 2011 →
  1. 145
  2. 254
  3. 317
  4. 412
  5. 5 
  6. 6 
  7. 72
  8. 811
  9. 916
  10. 102
  11. 1127
  12. 124
  13. 13 
  14. 14 
  15. 157
  16. 164
  17. 1710
  18. 18 
  19. 195
  20. 20 
  21. 214
  22. 229
  23. 2319
  24. 2422
  25. 25 
  26. 263
  27. 27 
  28. 2811
  29. 2915
  30. 3010
All Critical High Medium Low Exploited only Public exploit

118 results · Clear filters · Feed

  • Unscored —
    CVE-2011-4317 Public exploit EPSS 60%

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, wh…

    apache2 Debian
  • Unscored —
    CVE-2011-4542 Public exploit EPSS 24%

    Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parame…

  • Unscored —
    CVE-2011-4191 Public exploit EPSS 10%

    Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attacke…

  • Unscored —
    CVE-2011-3639 Public exploit EPSS 50%

    The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 …

    apache2 Debian
  • Unscored —
    CVE-2011-4571 Public exploit

    SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to exec…

  • Unscored —
    CVE-2011-4570 Public exploit

    SQL injection vulnerability in the Time Returns (com_timereturns) component 2.0 and possibly earlier versions for Jooml…

  • Unscored —
    CVE-2011-4572 Public exploit

    Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably…

  • Unscored —
    CVE-2011-4569 Public exploit

    SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to …

  • Unscored —
    CVE-2011-4567 Public exploit

    Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Ze…

  • Unscored —
    CVE-2011-4541 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject …

  • Unscored —
    CVE-2011-4561 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2011-4559 Public exploit

    SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2011-4564 Public exploit

    Cross-site scripting (XSS) vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-4335 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2011-4275 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow r…

  • Unscored —
    CVE-2010-5048 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2…

  • Unscored —
    CVE-2010-5058 Public exploit

    SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-5051 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable allows remote attackers to…

  • Unscored —
    CVE-2010-5053 Public exploit

    SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2010-5059 Public exploit

    SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-5057 Public exploit

    SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-5060 Public exploit

    SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-5052 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to injec…

  • Unscored —
    CVE-2010-5056 Public exploit

    SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2010-5046 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2010-5055 Public exploit

    SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-5062 Public exploit

    SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2010-5047 Public exploit

    SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2011-4496 Public exploit EPSS 11%

    Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (ak…

  • Unscored —
    CVE-2011-4040 Public exploit EPSS 65%

    Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a cr…

  • Unscored —
    CVE-2011-4404 Public exploit EPSS 59%

    The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 be…

  • Medium 6.5
    CVE-2011-4107 Public exploit EPSS 13%

    phpMyAdmin vulnerable to XML external entity (XXE) injection attack

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, …

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-4122 Public exploit

    Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to lo…

  • Unscored —
    CVE-2011-1516 Public exploit

    The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not prop…

  • Unscored —
    CVE-2011-4431 Public exploit

    Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to ex…

  • Critical 9.8
    CVE-2011-2013 Public exploit EPSS 32%

    Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …

  • Unscored —
    CVE-2011-4415 Public exploit

    The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when …

    apache2 Debian
  • Unscored —
    CVE-2011-3607 Public exploit

    Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x t…

    apache2 Debian
  • Unscored —
    CVE-2011-1513 Public exploit

    Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installa…

  • Unscored —
    CVE-2011-4066 Public exploit

    SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary …