CVEs published in October 2011

498 vulnerabilities, 60 critical, 2 exploited.

• linux kernel, redhat enterprise linux +1 more Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on... CVE-2011-4097 Fix available 5.5 MediumOctober 31, 2011
• phpldapadmin project phpldapadmin The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote... CVE-2011-4075 Public exploitFix available EPSS 51.9% 7.5 HighOctober 31, 2011
• phpldapadmin project phpldapadmin Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows... CVE-2011-4074 Public exploitFix available 4.3 MediumOctober 31, 2011
• google app engine python sdk The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly... CVE-2011-4213 7.2 HighOctober 30, 2011
• google app engine python sdk The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly... CVE-2011-4212 7.2 HighOctober 30, 2011
• google app engine python sdk The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before... CVE-2011-4211 7.2 HighOctober 30, 2011
• google app engine python sdk Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the... CVE-2011-1364 6.8 MediumOctober 30, 2011
• ibm websphere mq IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group... CVE-2009-0905 1.7 LowOctober 30, 2011
• ibm websphere mq Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7... CVE-2009-0900 4.1 MediumOctober 30, 2011
• ibm rational appscan Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7... CVE-2011-1367 9.3 HighOctober 30, 2011
• ibm rational appscan Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan... CVE-2011-1366 8.8 HighOctober 30, 2011
• ibm websphere application server Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere... CVE-2009-2748 4.3 MediumOctober 30, 2011
• ibm websphere application server The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server... CVE-2009-2747 5.0 MediumOctober 30, 2011
• ibm lotus sametime The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus... CVE-2011-1370 5.0 MediumOctober 29, 2011
• ibm websphere application server The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x... CVE-2011-1368 5.0 MediumOctober 29, 2011
• ibm websphere mq IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service (disk... CVE-2010-0780 4.3 MediumOctober 29, 2011
• linux kernel crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of... CVE-2011-4081 Fix available 5.5 MediumOctober 29, 2011
• linux kernel Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel... CVE-2011-4077 Fix available 6.9 MediumOctober 29, 2011
• apple quicktime Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or... CVE-2011-3251 9.3 HighOctober 28, 2011
• apple quicktime Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary... CVE-2011-3250 9.3 HighOctober 28, 2011
• apple quicktime Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code... CVE-2011-3249 9.3 HighOctober 28, 2011
• apple quicktime Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute... CVE-2011-3248 9.3 HighOctober 28, 2011
• apple quicktime Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute... CVE-2011-3247 9.3 HighOctober 28, 2011
• google chrome Google V8, as used in Google Chrome before 14.0.835.163, does not properly implement script... CVE-2011-2830 7.5 HighOctober 28, 2011
• ibm websphere ilog rule team server Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team... CVE-2011-1371 4.3 MediumOctober 28, 2011
• ibm http server Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as... CVE-2011-1360 4.3 MediumOctober 28, 2011
• google chrome ** DISPUTED ** Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as... CVE-2011-3640 Fix availableDisputed 7.1 HighOctober 28, 2011
• linux kernel fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in... CVE-2011-3638 Fix available 4.0 MediumOctober 28, 2011
• tor Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in... CVE-2011-2769 Fix available 4.3 MediumOctober 28, 2011
• tor Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part... CVE-2011-2768 Fix available 5.8 MediumOctober 28, 2011
• cisco webex recording format player Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF)... CVE-2011-4004 9.3 HighOctober 27, 2011
• cisco webex recording format player Buffer overflow in the WRF parsing functionality in the Cisco WebEx Recording Format (WRF) player... CVE-2011-3319 9.3 HighOctober 27, 2011
• cisco video surveillance 2421, video surveillance 2600, video surveillance 2500 +1 more +3 more Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0... CVE-2011-3318 7.8 HighOctober 27, 2011
• cisco unified communications manager, unified ip interactive voice response, unified ip ivr +2 more Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x... CVE-2011-3315 Public exploit EPSS 25.7% 7.8 HighOctober 27, 2011
• cisco nx-os, unified computing system, unified computing system infrastructure and unified computing system software +2 more Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2... CVE-2011-2569 6.8 MediumOctober 27, 2011
• openldap Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote... CVE-2011-4079 Fix available 4.0 MediumOctober 27, 2011
• puppet, puppet enterprise, puppetlabs puppet enterprise users +2 more Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and... CVE-2011-3872 Public exploitFix available 2.6 LowOctober 27, 2011
• simplesamlphp, debian linux +1 more simpleSAMLphp incorrectly handles XML encryption CVE-2011-4625 Fix available 7.5 HighOctober 27, 2011
• litech router advertisement daemon The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly... CVE-2011-3605 Fix available 5.0 MediumOctober 26, 2011
• litech router advertisement daemon The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote... CVE-2011-3604 Fix available 7.5 HighOctober 26, 2011
• litech router advertisement daemon Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd)... CVE-2011-3602 Fix available 6.4 MediumOctober 26, 2011
• litech router advertisement daemon Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8... CVE-2011-3601 Fix available 7.5 HighOctober 26, 2011
• google chrome Google Chrome before 15.0.874.102 does not properly restrict access to internal Google V8... CVE-2011-3891 7.5 HighOctober 25, 2011
• google chrome Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to... CVE-2011-3890 7.5 HighOctober 25, 2011
• google chrome Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102... CVE-2011-3889 7.5 HighOctober 25, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote... CVE-2011-3888 6.8 MediumOctober 25, 2011
• google chrome, apple iphone os, safari +2 more Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote... CVE-2011-3887 5.0 MediumOctober 25, 2011
• google v8 Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a... CVE-2011-3886 6.8 MediumOctober 25, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to... CVE-2011-3885 7.5 HighOctober 25, 2011
• google chrome Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal,... CVE-2011-3884 6.8 MediumOctober 25, 2011
• Show olderLoading…