CVEs published in October 2011
498 vulnerabilities, 60 critical, 2 exploited.
- libreoffice, sun openoffice.org +1 moreoowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote...4.3 Medium
- realnetworks realplayer, realplayer sp +1 moreCross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer...4.3 Medium
- google chromeGoogle Chrome before 14.0.835.202 does not properly implement shader translation, which allows...6.8 Medium
- google chromeGoogle Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows...6.8 Medium
- google chromeUse-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to...6.8 Medium
- google chromeGoogle Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety...6.8 Medium
- google chromeGoogle Chrome before 14.0.835.202 does not properly restrict access to the window prototype,...7.5 High
- google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote...6.8 Medium
- google chromeUse-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to...6.8 Medium
- adobe photoshop elementsMultiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to...9.3 High
- likno allwebmenus pluginPHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for...7.5 High
- jerome schneider ameos dragndropuploadUnspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2...7.5 High
- zikula application frameworkCross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault...4.3 Medium
- lightneasyMultiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow...3.5 Low
- nomachine nx node, nx server +1 moreUnspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server...7.2 High
- ammsoft scriptftpStack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute...6.8 Medium
- quassel-irc quasselThe CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote...5.0 Medium
- vmware spring framework, spring security +1 moreSpring Framework and Spring Security vulnerable to Deserialization of Untrusted Data6.8 Medium
- cisco ios, ios xe +1 moreUnspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2...7.8 High
- cisco iosUnspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application...7.8 High
- cisco ios, ios xe +1 moreMemory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and...7.5 High
- cisco ios, ios xe +1 moreThe provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1,...7.8 High
- cisco ios, ios xe +1 moreUnspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0...7.8 High
- cisco ios, ios xe +1 moreUnspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0...7.8 High
- cisco ios, ios xe +1 moreUnspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0...7.8 High
- cisco ios, ios xe +1 moreMemory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote...7.8 High
- cisco ios, ios xe +1 moreUnspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2...6.1 Medium
- cisco iosMemory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is...7.8 High
- cisco ios, ios xe +1 moreThe IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through...7.8 High
- cisco iosUnspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows...10.0 High
- cisco ios, 10008 router +1 moreUnspecified vulnerability in Cisco IOS 12.2SB before 12.2(33)SB10 and 15.0S before 15.0(1)S3a on...7.8 High
- cisco ios, ios xe, unified communications manager +2 moreMemory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco...7.8 High
- cisco ios, ios xe +1 moreThe NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG,...7.8 High
- cisco ios, ios xe +1 moreMemory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0...7.8 High
- cisco iosCisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (device...7.8 High
- cisco ios, ios xe +1 moreUnspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x,...7.8 High
- google android, htc evo 3d, evo 4g +1 more +3 moreA certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC...2.6 Low
- linux kernelkernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O...2.1 Low
- ffmpegInteger signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in...5.0 Medium
- ffmpegcavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to...5.0 Medium
- punbbMultiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB before 1.3...4.3 Medium
- ffmpeg, libav +1 moreInteger signedness error in the decode_residual_block function in cavsdec.c in libavcodec in...6.8 Medium
- hp nonstop server, samba, hp nonstop server software +2 moreUnspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x...9.0 High
- basercmsBaserCMS privilege escallation4.9 Medium
- basercmsCross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to...4.3 Medium
- symantec im managerThe management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute...7.5 High
- symantec im managerSQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows...7.5 High
- symantec im managerMultiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec IM...4.3 Medium