CVEs published in September 2011

403 vulnerabilities, 66 critical, 0 exploited.

• icewarp mail server IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain... CVE-2011-3580 5.0 MediumSeptember 30, 2011
• icewarp mail server server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote... CVE-2011-3579 Public exploit 6.4 MediumSeptember 30, 2011
• juan toledo etherape The add_conversation function in conversations.c in EtherApe before 0.9.12 allows remote... CVE-2011-3369 Fix available 5.0 MediumSeptember 30, 2011
• twiki Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers... CVE-2011-3010 Public exploit 4.3 MediumSeptember 30, 2011
• puppet Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2011-3871 Fix available 6.2 MediumSeptember 29, 2011
• puppet Puppet allows local users to modify the permissions of arbitrary files CVE-2011-3870 Fix available 6.3 MediumSeptember 29, 2011
• puppet Puppet arbitrary file overwrite CVE-2011-3869 Fix available 6.3 MediumSeptember 29, 2011
• mozilla firefox, seamonkey +1 more Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of... CVE-2011-3866 4.3 MediumSeptember 29, 2011
• puppet Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows... CVE-2011-3848 Fix available 5.0 MediumSeptember 29, 2011
• ffmpeg The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which... CVE-2011-3504 Fix available 9.3 HighSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4,... CVE-2011-3232 Fix available 9.3 HighSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and... CVE-2011-3005 Fix available 9.3 HighSeptember 29, 2011
• mozilla firefox, seamonkey +1 more The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly... CVE-2011-3004 Fix available 4.3 MediumSeptember 29, 2011
• mozilla firefox, seamonkey +1 more Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of... CVE-2011-3003 Fix available 10.0 HighSeptember 29, 2011
• mozilla firefox, seamonkey +1 more Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey... CVE-2011-3002 Fix available 9.3 HighSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent... CVE-2011-3001 Fix available 4.3 MediumSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4... CVE-2011-3000 Fix available 4.3 MediumSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3... CVE-2011-2999 Fix available 4.3 MediumSeptember 29, 2011
• mozilla firefox Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a... CVE-2011-2998 Fix available 10.0 HighSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird... CVE-2011-2997 Fix available 10.0 HighSeptember 29, 2011
• mozilla firefox Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote... CVE-2011-2996 Fix available 10.0 HighSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4... CVE-2011-2995 Fix available 10.0 HighSeptember 29, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4... CVE-2011-2372 Fix available 3.5 LowSeptember 29, 2011
• ulyssesonline black-letterhead Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress... CVE-2011-3865 Public exploit 4.3 MediumSeptember 28, 2011
• somadesign the erudite Cross-site scripting (XSS) vulnerability in the The Erudite theme before 2.7.9 for WordPress... CVE-2011-3864 4.3 MediumSeptember 28, 2011
• post-scriptum redline Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows... CVE-2011-3863 Public exploit 4.3 MediumSeptember 28, 2011
• adazing morning coffee Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress... CVE-2011-3862 Public exploit 4.3 MediumSeptember 28, 2011
• webminimalist web minimalist 200901 Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for... CVE-2011-3861 Public exploit 4.3 MediumSeptember 28, 2011
• onedesigns cover wp Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows... CVE-2011-3860 Public exploit 4.3 MediumSeptember 28, 2011
• themehybrid trending Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows... CVE-2011-3859 Public exploit 4.3 MediumSeptember 28, 2011
• zespia pixiv custom Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress... CVE-2011-3858 Public exploit 4.3 MediumSeptember 28, 2011
• antisocialmediallc antisnews Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows... CVE-2011-3857 4.3 MediumSeptember 28, 2011
• atastypixel elegant grunge Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress... CVE-2011-3856 Public exploit 4.3 MediumSeptember 28, 2011
• graphpaperpress f8 lite Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows... CVE-2011-3855 Public exploit 4.3 MediumSeptember 28, 2011
• quirm zenlite Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows... CVE-2011-3854 4.3 MediumSeptember 28, 2011
• themehybrid hybrid Cross-site scripting (XSS) vulnerability in the Hybrid theme before 0.10 for WordPress allows... CVE-2011-3853 4.3 MediumSeptember 28, 2011
• theme4press evolve Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows... CVE-2011-3852 Public exploit 4.3 MediumSeptember 28, 2011
• devpress news Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote... CVE-2011-3851 4.3 MediumSeptember 28, 2011
• bytesforall atahualpa Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows... CVE-2011-3850 Public exploit 4.3 MediumSeptember 28, 2011
• netsaro enterprise messenger server The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote... CVE-2011-3694 5.0 MediumSeptember 27, 2011
• netsaro enterprise messenger server NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server... CVE-2011-3693 1.9 LowSeptember 27, 2011
• netsaro enterprise messenger server NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml... CVE-2011-3692 1.9 LowSeptember 27, 2011
• foxitsoftware foxit reader Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain... CVE-2011-3691 9.3 HighSeptember 27, 2011
• plotsoft pdfill pdf editor Untrusted search path vulnerability in PlotSoft PDFill PDF Editor 8.0 allows local users to gain... CVE-2011-3690 9.3 HighSeptember 27, 2011
• wibu codemeter webadmin Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30... CVE-2011-3689 4.3 MediumSeptember 27, 2011
• sonexis conferencemanager Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote... CVE-2011-3688 7.5 HighSeptember 27, 2011
• sonexis conferencemanager Multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow... CVE-2011-3687 4.3 MediumSeptember 27, 2011
• sonexis conferencemanager Multiple cross-site scripting (XSS) vulnerabilities in myAddressBook.asp in Sonexis... CVE-2011-3686 4.3 MediumSeptember 27, 2011
• tembria server monitor Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application... CVE-2011-3685 1.9 LowSeptember 27, 2011
• tembria server monitor Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build... CVE-2011-3684 4.3 MediumSeptember 27, 2011
• Show olderLoading…