Skip to content
OpenAdvisories

Archive

November 2011

Vulnerabilities first published in this month (UTC), newest first.

← October 2011 2011 / November December 2011 →
  1. 145
  2. 254
  3. 317
  4. 412
  5. 5 
  6. 6 
  7. 72
  8. 811
  9. 916
  10. 102
  11. 1127
  12. 124
  13. 13 
  14. 14 
  15. 157
  16. 164
  17. 1710
  18. 18 
  19. 195
  20. 20 
  21. 214
  22. 229
  23. 2319
  24. 2422
  25. 25 
  26. 263
  27. 27 
  28. 2811
  29. 2915
  30. 3010
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2011-4319

    Cross-site Scripting vulnerability in i18n translations helper method

    Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via ve…

    actionpack RubyGems
  • Medium 6.5
    CVE-2011-4107 Public exploit EPSS 13%

    phpMyAdmin vulnerable to XML external entity (XXE) injection attack

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, …

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist