CVEs published in November 2010
289 vulnerabilities, 70 critical, 3 exploited.
- cstr festivalfestival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta...6.9 Medium
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers...9.3 High
- transware active\! mailCRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows...4.3 Medium
- apache shiro, jsecurity +1 moreApache Shiro Path Traversal vulnerability5.0 Medium
- nongnu cvsArray index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to...6.9 Medium
- mozilla bugzillaThe Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1...5.0 Medium
- mozilla bugzillaCRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3,...2.6 Low
- apple cups, mac os x, mac os x server +10 more +12 moreipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values...9.8 Critical
- microsoft windows 7, windows server 2003, windows vista +1 more +3 moreUntrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in...9.3 High
- yawsDirectory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files...5.0 Medium
- libguestfslibguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly...4.7 Medium
- isc dhcpISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote...4.3 Medium
- exv2Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to...4.3 Medium
- rhinosoft ftp voyagerDirectory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly...9.3 High
- crossftp proDirectory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP...9.3 High
- 4site cmsSQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows...7.5 High
- deluxebbSQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when...6.8 Medium
- wsn links, wsnlinks wsn links +1 moreMultiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x...7.5 High
- deliciousdays cformsMultiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in...4.3 Medium
- vim gvimUntrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly...9.3 High
- sonicwall ssl-vpn end-point interrogator\/installer activex controlStack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control...9.3 High
- freshwebmaster fresh ftpDirectory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier,...9.3 High
- anyconnectDirectory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP...9.3 High
- avactis shopping cartMultiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free...7.5 High
- attachmate reflection for the webCross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10...4.3 Medium
- aspindir kisisel radyo scriptKisisel Radyo Script stores sensitive information under the web root with insufficient access...5.0 Medium
- aspindir kisisel radyo scriptSQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to...7.5 High
- phpcheckzSQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled,...6.8 Medium
- hp insight control for linuxCross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows...6.8 Medium
- hp insight orchestrationUnspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to...6.4 Medium
- hp insight orchestrationUnspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read...5.0 Medium
- hp insight managed system setup wizardUnspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote...5.0 Medium
- hp insight recoveryUnspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read...5.0 Medium
- hp insight recoveryCross-site scripting (XSS) vulnerability in HP Insight Recovery before 6.2 allows remote...4.3 Medium
- hp insight control performance managementUnspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows...5.0 Medium
- hp insight control performance managementCross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management...6.8 Medium
- hp insight control performance managementUnspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote...8.0 High
- hp insight control performance managementCross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2...4.3 Medium
- realflex realwinMultiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow...10.0 High