Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
September

CVEs published in September 2011

403 vulnerabilities, 66 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe acrobat, acrobat reader +1 moreBuffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before...CVE-2011-24329.3 HighSeptember 15, 2011
adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow...CVE-2011-24319.3 HighSeptember 15, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreMultiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows...CVE-2011-1991EPSS 12.1%9.3 HighSeptember 15, 2011
microsoft excel, excel viewer, office +2 more +4 moreMicrosoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack...CVE-2011-1990EPSS 20.5%9.3 HighSeptember 15, 2011
microsoft excel, excel viewer, excel web app +4 more +6 moreMicrosoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel...CVE-2011-1989EPSS 27.8%9.3 HighSeptember 15, 2011
microsoft excel, excel viewer, office +2 more +4 moreMicrosoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac;...CVE-2011-1988EPSS 18.6%9.3 HighSeptember 15, 2011
microsoft excel, excel viewer, office +2 more +4 moreArray index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010...CVE-2011-1987EPSS 20.5%9.3 HighSeptember 15, 2011
microsoft excelUse-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute...CVE-2011-1986EPSS 21.5%9.3 HighSeptember 15, 2011
microsoft windows server 2003, windows 2003 server, windows server 2008 +2 moreWINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users...CVE-2011-1984Public exploit7.2 HighSeptember 15, 2011
microsoft officeMicrosoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object...CVE-2011-1982EPSS 27.7%9.3 HighSeptember 15, 2011
microsoft officeUntrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users...CVE-2011-1980EPSS 10.4%9.3 HighSeptember 15, 2011
microsoft sharepoint foundation, sharepoint server, sharepoint services +2 moreCross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows...CVE-2011-1893EPSS 16.8%4.3 MediumSeptember 15, 2011
microsoft forms server, groove, groove data bridge server +7 more +9 moreMicrosoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server...CVE-2011-1892Public exploitEPSS 41.4%4.0 MediumSeptember 15, 2011
microsoft sharepoint foundation, sharepoint services +1 moreCross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and...CVE-2011-1891EPSS 16.8%4.3 MediumSeptember 15, 2011
microsoft sharepoint foundation, sharepoint server +1 moreCross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server...CVE-2011-1890EPSS 19.8%4.3 MediumSeptember 15, 2011
adobe acrobat readerUnspecified vulnerability in Adobe Reader 10.x before 10.1.1 on Windows allows local users to...CVE-2011-13536.9 MediumSeptember 15, 2011
microsoft sharepoint foundation, sharepoint server +1 moreCross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1,...CVE-2011-0653EPSS 16.9%4.3 MediumSeptember 15, 2011
cmu cyrus imap serverThe index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server...CVE-2011-3481Fix available4.3 MediumSeptember 14, 2011
cmu cyrus imap serverStack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP...CVE-2011-3208Fix available7.5 HighSeptember 14, 2011
acdsee fotoslateMultiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to...CVE-2011-2595Public exploitEPSS 59.7%10.0 HighSeptember 14, 2011
cisco nexus 3000, nexus 5000, nx-os +2 moreThe ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series...CVE-2011-25815.0 MediumSeptember 14, 2011
mark stosberg data\The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled...CVE-2011-2201Public exploitFix available4.3 MediumSeptember 14, 2011
edgetechweb event registrationSQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress...CVE-2010-4839Public exploit7.5 HighSeptember 13, 2011
extensiondepot com jsupportSQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows...CVE-2010-4838Public exploit6.0 MediumSeptember 13, 2011
extensiondepot com jsupportCross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for...CVE-2010-4837Public exploit4.3 MediumSeptember 13, 2011
phpshopCross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows...CVE-2010-4836Public exploit4.3 MediumSeptember 13, 2011
oneorzero aimsDirectory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows...CVE-2010-4835Public exploit4.0 MediumSeptember 13, 2011
oneorzero aimsMultiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2...CVE-2010-4834Public exploit6.5 MediumSeptember 13, 2011
pentaho bi serverPentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which...CVE-2009-51015.0 MediumSeptember 13, 2011
pentaho bi serverPentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages...CVE-2009-51002.1 LowSeptember 13, 2011
pentaho bi serverCross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and...CVE-2009-50994.3 MediumSeptember 13, 2011
hp palm pre webosThe LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape...CVE-2009-5098Public exploit5.4 MediumSeptember 13, 2011
hp palm pre webosPalm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote...CVE-2009-50977.1 HighSeptember 13, 2011
khalid baheyeldin flag contentCross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for...CVE-2009-50964.3 MediumSeptember 13, 2011
mantisbtMultiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote...CVE-2011-33584.3 MediumSeptember 12, 2011
mantisbtDirectory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows...CVE-2011-33576.8 MediumSeptember 12, 2011
apache libcloudApache Libcloud does not verify SSL certificates for HTTPS connectionsCVE-2010-4340Fix available4.3 MediumSeptember 11, 2011
apple mac os x, mac os x server +1 moreThe Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an...CVE-2011-34224.3 MediumSeptember 10, 2011
google cr-48 chromebook, acer ac700 chromebook, google chrome os +1 more +3 moreMultiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700,...CVE-2011-342110.0 HighSeptember 10, 2011
google cr-48 chromebook, acer ac700 chromebook, google chrome os +1 more +3 moreMultiple unspecified vulnerabilities in Google Chrome before 14.0.835.157 on the Acer AC700,...CVE-2011-342010.0 HighSeptember 10, 2011
ea-style gbookPHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote...CVE-2009-5095Public exploit6.8 MediumSeptember 9, 2011
cmsfaethon cms faethonSQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to...CVE-2009-5094Public exploit7.5 HighSeptember 9, 2011
php4scripte gastebuchDirectory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote...CVE-2009-5093Public exploit5.0 MediumSeptember 9, 2011
microsoft fast espCross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5...CVE-2009-5092EPSS 12.8%4.3 MediumSeptember 9, 2011
vlinksSQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to...CVE-2009-5091Public exploit7.5 HighSeptember 9, 2011
daman371 bloggeruniverseSQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc...CVE-2009-5090Public exploit6.8 MediumSeptember 9, 2011
ideacartDirectory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers...CVE-2009-5089Public exploit4.3 MediumSeptember 9, 2011
ideacartSQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to...CVE-2009-5088Public exploit7.5 HighSeptember 9, 2011
geovision digital surveillance systemDirectory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System...CVE-2009-5087Public exploit5.0 MediumSeptember 9, 2011
phorumCross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2...CVE-2011-33924.3 MediumSeptember 8, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open