CVEs published in October 2011
498 vulnerabilities, 60 critical, 2 exploited.
- apple itunesBuffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to...9.3 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...7.6 High
- apple itunesCoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string...7.6 High
- hp onboard administratorUnspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote...6.4 Medium
- microsoft forefront unified access gatewayMicrosoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not...5.0 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows media center tv pack, windows vista +2 moreUntrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and...9.3 High
- microsoft host integration serverMicrosoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote...5.0 Medium
- microsoft host integration serverMicrosoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote...5.0 Medium
- microsoft windows xp, ancillary function driver (afd.sys), windows server 2003 +2 moreafd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2...7.8 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreBuffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...9.3 High
- microsoft windows 7, windows server 2008, windows vista +2 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2...4.7 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 does not properly allocate and access memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft forefront unified access gatewayMicrosoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides...9.3 High
- microsoft forefront unified access gatewayCross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010...4.3 Medium
- microsoft forefront unified access gatewayCross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010...4.3 Medium
- microsoft forefront unified access gatewayCRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold,...4.3 Medium
- microsoft .net framework, silverlight +1 moreMicrosoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUntrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft...9.3 High
- plone cmfeditions, plone +1 morePlone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable9.3 High
- adam kennedy crypt-dsaThe Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses...5.8 Medium
- plone, zope +1 moreZope Command Execution Vulnerability9.3 High
- utage.org enkaiCross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to...4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 morenet/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high...7.5 High
- hulihanapplications hulihan bxrSQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to...7.5 High
- dev-team typoheads webkitpdfWebkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands7.5 High
- dev-team typoheads webkitpdfWebkit PDFs for TYPO3 has SQL Injection vulnerability7.5 High
- martin hesse mh branchenbuchCross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch...4.3 Medium
- Show moreLoading…