Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
October

CVEs published in October 2011

498 vulnerabilities, 60 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

google chromeUse-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to...CVE-2011-38837.5 HighOctober 25, 2011
google chromeUse-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to...CVE-2011-38827.5 HighOctober 25, 2011
google android, chrome, apple iphone os +1 more +3 moreWebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote...CVE-2011-38814.3 MediumOctober 25, 2011
google chromeGoogle Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a...CVE-2011-38807.5 HighOctober 25, 2011
google chromeGoogle Chrome before 15.0.874.102 does not prevent redirects to chrome: URLs, which has...CVE-2011-38797.5 HighOctober 25, 2011
google chromeRace condition in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of...CVE-2011-38786.8 MediumOctober 25, 2011
google chromeCross-site scripting (XSS) vulnerability in the appcache internals page in Google Chrome before...CVE-2011-38774.3 MediumOctober 25, 2011
google chromeGoogle Chrome before 15.0.874.102 does not properly handle downloading files that have whitespace...CVE-2011-38766.8 MediumOctober 25, 2011
google chromeGoogle Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL...CVE-2011-38754.3 MediumOctober 25, 2011
google chrome, apple iphone os, safari +2 moreGoogle Chrome before 15.0.874.102 does not properly handle history data, which allows user...CVE-2011-28454.3 MediumOctober 25, 2011
simplemachines smfCross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1...CVE-2011-41736.8 MediumOctober 24, 2011
kent-web web forumMultiple cross-site scripting (XSS) vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote...CVE-2011-41724.3 MediumOctober 24, 2011
ibm websphere ilog rule team serverCross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team...CVE-2011-41714.3 MediumOctober 24, 2011
kent-web web forumCross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote...CVE-2011-39844.3 MediumOctober 24, 2011
kent-web web forumCross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote...CVE-2011-39834.3 MediumOctober 24, 2011
simplemachines smfMultiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x...CVE-2011-36157.5 HighOctober 24, 2011
kent-web web forumCross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote...CVE-2011-33834.3 MediumOctober 24, 2011
novell zenworks handheld managementUnspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows...CVE-2011-26569.3 HighOctober 24, 2011
novell zenworks handheld managementUnspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows...CVE-2011-26559.3 HighOctober 24, 2011
linux-pamThe _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam)...CVE-2011-3149Fix available2.1 LowOctober 24, 2011
linux-pamStack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux...CVE-2011-3148Fix available4.6 MediumOctober 24, 2011
gnome empathyCross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy...CVE-2011-4170Fix available4.3 MediumOctober 23, 2011
gnome empathyCross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy...CVE-2011-3635Fix available4.3 MediumOctober 23, 2011
hp multifunction peripheral digital sending softwareHP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive...CVE-2011-31631.2 LowOctober 23, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software +1 moreThe platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...CVE-2011-20604.9 MediumOctober 22, 2011
cisco iosThe ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct...CVE-2011-20595.0 MediumOctober 22, 2011
cisco iosThe cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an...CVE-2011-20587.5 HighOctober 22, 2011
cisco iosThe cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a...CVE-2011-20577.5 HighOctober 22, 2011
cisco ciscoworks common servicesThe Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before...CVE-2011-20425.0 MediumOctober 22, 2011
cisco iosThe ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a...CVE-2011-16407.5 HighOctober 22, 2011
xia zuojie nexusphpSQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute...CVE-2011-4026Public exploit7.5 HighOctober 21, 2011
ocsinventory-ng ocs inventory ngCross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier...CVE-2011-4024Public exploitFix available4.3 MediumOctober 21, 2011
lockon ec-cubeSQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows...CVE-2011-39887.5 HighOctober 21, 2011
cybozu officeCybozu Office before 8.0.0 allows remote authenticated users to bypass intended access...CVE-2011-26775.5 MediumOctober 21, 2011
asterisk open sourcechan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before...CVE-2011-4063Fix available6.8 MediumOctober 21, 2011
atcom netvolutionSQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute...CVE-2011-3340Public exploit7.5 HighOctober 21, 2011
rim blackberry enterprise serverThe BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server ...CVE-2011-02906.5 MediumOctober 21, 2011
atcom netvolutionSQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to...CVE-2010-4967Public exploit7.5 HighOctober 21, 2011
atcom netvolutionCross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote...CVE-2010-49664.3 MediumOctober 21, 2011
atcom netvolutionCross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to...CVE-2009-5103Public exploit4.3 MediumOctober 21, 2011
atcom netvolutionSQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers...CVE-2009-5102Public exploit7.5 HighOctober 21, 2011
redhat enterprise linuxA certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6...CVE-2011-33474.6 MediumOctober 21, 2011
linux kernelThe div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26...CVE-2011-3209Fix available4.9 MediumOctober 21, 2011
mit kerberos 5The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2011-4151Fix available7.8 HighOctober 20, 2011
mit kerberos 5The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2011-1529Fix available7.8 HighOctober 20, 2011
mit kerberos 5The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2011-1528Fix available7.8 HighOctober 20, 2011
mit kerberos 5The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...CVE-2011-1527Fix available7.8 HighOctober 20, 2011
cisco ciscoworks common services, microsoft windows +1 moreThe Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in...CVE-2011-3310EPSS 15.2%9.0 HighOctober 20, 2011
cisco show and shareCisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote authenticated users...CVE-2011-25856.5 MediumOctober 20, 2011
cisco show and shareCisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote attackers to access...CVE-2011-25847.5 HighOctober 20, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open