Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
October

CVEs published in October 2011

498 vulnerabilities, 60 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

apple iphone osThe Settings component in Apple iOS before 5, when a configuration profile is used for a locale...CVE-2011-34309.3 HighOctober 14, 2011
apple iphone osThe Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in...CVE-2011-34292.1 LowOctober 14, 2011
apple tv, iphone os +1 moreThe Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly...CVE-2011-34272.6 LowOctober 14, 2011
apple iphone osCross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web...CVE-2011-34264.3 MediumOctober 14, 2011
apple iphone osDouble free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to...CVE-2011-32616.8 MediumOctober 14, 2011
apple iphone osBuffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute...CVE-2011-32606.8 MediumOctober 14, 2011
apple tv, iphone os +1 moreThe kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory...CVE-2011-32595.0 MediumOctober 14, 2011
apple iphone osThe Data Access component in Apple iOS before 5 does not properly handle the existence of...CVE-2011-32572.1 LowOctober 14, 2011
apple iphone osFreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise...CVE-2011-3256Fix available4.3 MediumOctober 14, 2011
apple iphone osCFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it...CVE-2011-32554.3 MediumOctober 14, 2011
apple iphone osCross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote...CVE-2011-32544.3 MediumOctober 14, 2011
apple iphone osCalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows...CVE-2011-32532.6 LowOctober 14, 2011
apple mac os x, iphone os, mac os x server +2 moreCFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs,...CVE-2011-32465.0 MediumOctober 14, 2011
apple iphone osThe Keyboards component in Apple iOS before 5 displays the final character of an entered password...CVE-2011-32452.1 LowOctober 14, 2011
apple safari, iphone os +1 moreCross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari...CVE-2011-32434.3 MediumOctober 14, 2011
apple safariThe Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize...CVE-2011-32425.0 MediumOctober 14, 2011
apple safariThe SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses...CVE-2011-32316.8 MediumOctober 14, 2011
apple safariApple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which...CVE-2011-3230Public exploitEPSS 49.3%6.8 MediumOctober 14, 2011
apple safariDirectory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute...CVE-2011-32296.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreQuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or...CVE-2011-32286.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 morelibsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of...CVE-2011-32276.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreOpen Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307...CVE-2011-32266.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreThe SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest...CVE-2011-32255.0 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreThe User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates...CVE-2011-32242.6 LowOctober 14, 2011
apple mac os x, mac os x server +1 moreBuffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute...CVE-2011-32236.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreBuffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute...CVE-2011-32226.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreQuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie...CVE-2011-32216.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreQuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie...CVE-2011-32204.3 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreThe "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML...CVE-2011-32182.6 LowOctober 14, 2011
apple mac os x, mac os x server +1 moreMediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or...CVE-2011-32176.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreThe kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for...CVE-2011-32162.1 LowOctober 14, 2011
apple mac os x, mac os x server +1 moreThe kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence...CVE-2011-32152.1 LowOctober 14, 2011
apple mac os x, mac os x server +1 moreIOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in...CVE-2011-32144.6 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreThe File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X...CVE-2011-32137.6 HighOctober 14, 2011
apple mac os x, mac os x server +1 moreCoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted...CVE-2011-32122.1 LowOctober 14, 2011
apple mac os x, mac os x server +1 moreThe CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window...CVE-2011-02604.6 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreCFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage...CVE-2011-02315.0 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreBuffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X...CVE-2011-02307.5 HighOctober 14, 2011
apple mac os x, mac os x server +1 moreApple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type...CVE-2011-02296.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreCoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or...CVE-2011-02246.8 MediumOctober 14, 2011
apple mac os x, mac os x server +1 moreFormat string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS...CVE-2011-01854.4 MediumOctober 14, 2011
apple itunesBuffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to...CVE-2011-32529.3 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32447.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32417.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32397.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32387.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32377.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32367.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32357.6 HighOctober 12, 2011
apple itunes, webkit +1 moreWebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute...CVE-2011-32337.6 HighOctober 12, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open