Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
October

CVEs published in October 2011

498 vulnerabilities, 60 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

mechbunny paysitereviewcmsMultiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote...CVE-2010-4909Public exploit4.3 MediumOctober 8, 2011
virtuenetz virtue shopping mallSQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to...CVE-2010-49087.5 HighOctober 8, 2011
zenphotoCross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote...CVE-2010-4907Public exploit4.3 MediumOctober 8, 2011
zenphotoSQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote...CVE-2010-4906Public exploit7.5 HighOctober 8, 2011
softbizscripts article directory scriptSQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows...CVE-2010-4905Public exploit7.5 HighOctober 8, 2011
simon philips com aardvertiserSQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for...CVE-2010-4904Public exploit7.5 HighOctober 8, 2011
cubecartSQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute...CVE-2010-49037.5 HighOctober 8, 2011
joomla-clantools clantoolsMultiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for...CVE-2010-4902Public exploit7.5 HighOctober 8, 2011
squiz mysource matrixMultiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3...CVE-2010-4901Public exploit4.3 MediumOctober 8, 2011
webmanager-pro cms webmanager-proOpen redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote...CVE-2010-49005.8 MediumOctober 8, 2011
webmanager-pro cms webmanager-proSQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to...CVE-2010-4899Public exploit7.5 HighOctober 8, 2011
gantry-framework com gantrySQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote...CVE-2010-4898Public exploit7.5 HighOctober 8, 2011
bluecms project bluecmsSQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute...CVE-2010-48977.5 HighOctober 8, 2011
expinion.net member management systemCross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0...CVE-2010-48964.3 MediumOctober 8, 2011
chillycmsCross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote...CVE-2010-4895Public exploit4.3 MediumOctober 8, 2011
chillycmsSQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to...CVE-2010-4894Public exploit7.5 HighOctober 8, 2011
festengine festosCross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote...CVE-2010-4893Public exploit4.3 MediumOctober 8, 2011
phppgadminMultiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote...CVE-2011-3598Fix available4.3 MediumOctober 8, 2011
novell groupwiseArray index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows...CVE-2011-266310.0 HighOctober 8, 2011
novell groupwiseInteger signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3...CVE-2011-266210.0 HighOctober 8, 2011
novell groupwiseMultiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before...CVE-2011-26614.3 MediumOctober 8, 2011
novell identity manager roles based provisioning module, identity manager user application +1 moreCross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3...CVE-2011-22274.3 MediumOctober 8, 2011
novell groupwiseUnspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3...CVE-2011-22195.0 MediumOctober 8, 2011
novell groupwiseUnspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3...CVE-2011-22185.0 MediumOctober 8, 2011
novell identity manager roles based provisioning module, identity manager user application +1 moreCross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3...CVE-2011-16964.3 MediumOctober 8, 2011
novell groupwiseStack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8...CVE-2011-033410.0 HighOctober 8, 2011
novell groupwiseHeap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in...CVE-2011-033310.0 HighOctober 8, 2011
vmware ams, fusion, player +1 more +3 moreBuffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware...CVE-2011-38689.3 HighOctober 7, 2011
alex kellner powermailCross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows...CVE-2010-48924.3 MediumOctober 7, 2011
andreas kiefer ke yacSQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3...CVE-2010-48917.5 HighOctober 7, 2011
andreas kiefer ke yacCross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1...CVE-2010-48904.3 MediumOctober 7, 2011
marco hezel hm tinymarketUnspecified vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for...CVE-2010-488910.0 HighOctober 7, 2011
marco hezel hm tinymarketSQL injection vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for...CVE-2010-48887.5 HighOctober 7, 2011
raphael zschorsch commentsbeSQL injection vulnerability in the Commenting system Backend Module (commentsbe) extension 0.0.2...CVE-2010-48877.5 HighOctober 7, 2011
peter proell tweetbuttonCross-site scripting (XSS) vulnerability in the "official twitter tweet button for your page" ...CVE-2010-48864.3 MediumOctober 7, 2011
peter proell xingCross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2 for...CVE-2010-48854.3 MediumOctober 7, 2011
hinnendahl gaestebuchPHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote...CVE-2010-4884Public exploit7.5 HighOctober 7, 2011
modx revolutionCross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows...CVE-2010-4883Public exploit2.6 LowOctober 7, 2011
ventics auto cmsCross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers...CVE-2010-4882Public exploit4.3 MediumOctober 7, 2011
apphp calendarMultiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP...CVE-2010-48816.8 MediumOctober 7, 2011
apphp calendarMultiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar ...CVE-2010-48804.3 MediumOctober 7, 2011
digitaljunkies dompdfDOMPDF Remote File Inclusion VulnerabilityCVE-2010-4879Public exploitFix available7.5 HighOctober 7, 2011
hinnendahl kontakt formularPHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote...CVE-2010-4878Public exploit7.5 HighOctober 7, 2011
insanevisions onecmsCross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to...CVE-2010-4877Public exploit4.3 MediumOctober 7, 2011
mblogger project mbloggerSQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute...CVE-2010-4876Public exploit7.5 HighOctober 7, 2011
xondie vodpod video galleryCross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the...CVE-2010-4875Public exploit4.3 MediumOctober 7, 2011
ninkobbMultiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote...CVE-2010-4874Public exploit4.3 MediumOctober 7, 2011
webidsupport webidCross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers...CVE-2010-4873Public exploit4.3 MediumOctober 7, 2011
pilotcart pilot cartSQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to...CVE-2010-4872Public exploit7.5 HighOctober 7, 2011
smartftpUnspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown...CVE-2010-487110.0 HighOctober 7, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open