Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
October

CVEs published in October 2011

498 vulnerabilities, 60 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

bloofox bloofoxcmsSQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute...CVE-2010-4870Public exploit7.5 HighOctober 7, 2011
cherokee-project cherokeeCross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99...CVE-2011-21916.8 MediumOctober 7, 2011
cherokee-project cherokeeThe generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for...CVE-2011-21902.1 LowOctober 7, 2011
iceni argus, infix +1 moreStack-based buffer overflow in Iceni Argus 6.20 and earlier and Infix 5.04 allows remote...CVE-2011-333210.0 HighOctober 6, 2011
cisco nac managerDirectory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows...CVE-2011-3305EPSS 21.6%7.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +2 more +4 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-33047.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-33037.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-33027.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-33017.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-33007.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-32997.8 HighOctober 6, 2011
cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...CVE-2011-32987.9 HighOctober 6, 2011
cisco catalyst 6500, catalyst 7600, firewall services module software +2 moreCisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0...CVE-2011-32977.8 HighOctober 6, 2011
cisco catalyst 6500, catalyst 7600, firewall services module software +2 moreCisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0...CVE-2011-32967.8 HighOctober 6, 2011
cisco unified presenceCisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion,...CVE-2011-32887.5 HighOctober 6, 2011
cisco jabber extensible communications platformCisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0...CVE-2011-32877.8 HighOctober 6, 2011
cyrus imapdimap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote...CVE-2011-33727.5 HighOctober 6, 2011
linux kernelRace condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6...CVE-2011-2183Public exploit4.0 MediumOctober 6, 2011
apache http serverThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...CVE-2011-3368Public exploitFix availableEPSS 90.7%5.0 MediumOctober 5, 2011
drbenhur dbhcmsSQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute...CVE-2010-4869Public exploit7.5 HighOctober 5, 2011
w-agoraCross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and...CVE-2010-4868Public exploit4.3 MediumOctober 5, 2011
w-agoraDirectory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier...CVE-2010-4867Public exploit7.5 HighOctober 5, 2011
chipmunk-scripts chipmunk boardSQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute...CVE-2010-4866Public exploit7.5 HighOctober 5, 2011
harmistechnology com jeguestbookSQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla!...CVE-2010-4865Public exploit7.5 HighOctober 5, 2011
danieljamesscott com clubmanagerSQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows...CVE-2010-4864Public exploit7.5 HighOctober 5, 2011
get-simple getsimple cmsCross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows...CVE-2010-4863Public exploit4.3 MediumOctober 5, 2011
harmistechnology com jedirectorySQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for...CVE-2010-4862Public exploit7.5 HighOctober 5, 2011
webspellSQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute...CVE-2010-4861Public exploit7.5 HighOctober 5, 2011
galaxyscriptz myphpauctionSQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to...CVE-2010-4860Public exploit7.5 HighOctober 5, 2011
webasyst shop-scriptSQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to...CVE-2010-48597.5 HighOctober 5, 2011
joerg risse dnet live-statsDirectory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote...CVE-2010-4858Public exploit5.0 MediumOctober 5, 2011
curtiss grymala cag cmsSQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute...CVE-2010-4857Public exploit7.5 HighOctober 5, 2011
aspindir xweblogSQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute...CVE-2010-4856Public exploit7.5 HighOctober 5, 2011
aspindir xweblogSQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute...CVE-2010-4855Public exploit7.5 HighOctober 5, 2011
zuituSQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled,...CVE-2010-48546.8 MediumOctober 5, 2011
chillcreations com ccinvoicesSQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows...CVE-2010-4853Public exploit7.5 HighOctober 5, 2011
ibm aixThe Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA...CVE-2011-39822.1 LowOctober 5, 2011
checkpoint connectra ngx, vpn-1, vpn-1 firewall-1 vsx +2 moreMultiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace,...CVE-2011-18279.3 HighOctober 5, 2011
tedfelix acpidacpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has...CVE-2011-1159Public exploitFix available2.1 LowOctober 5, 2011
linux kernelnet/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a...CVE-2011-10764.9 MediumOctober 5, 2011
cyber-ark password vault web accessCross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and...CVE-2011-04594.3 MediumOctober 5, 2011
netshinesoftware com netinvoiceSQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1...CVE-2008-73027.5 HighOctober 5, 2011
sclek jsiteSQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute...CVE-2008-7301Public exploit7.5 HighOctober 5, 2011
sun opensolaris, sunos +1 moreThe labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and...CVE-2008-73008.5 HighOctober 5, 2011
apache jservThe default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2...CVE-2000-12472.1 LowOctober 5, 2011
quaggaHeap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in...CVE-2011-33277.5 HighOctober 5, 2011
quaggaThe ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers...CVE-2011-33265.0 MediumOctober 5, 2011
quaggaospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of...CVE-2011-33255.0 MediumOctober 5, 2011
quaggaThe ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga...CVE-2011-33245.0 MediumOctober 5, 2011
quaggaThe OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a...CVE-2011-33235.0 MediumOctober 5, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open