CVEs published in November 2011
324 vulnerabilities, 73 critical, 1 exploited.
- geeklog Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8... 4.3 Medium
- lesterchan wp-postratings SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and... 6.0 Medium
- hastymail hastymail2 Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs... 7.5 High
- namazu Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7... 2.6 Low
- apache http server The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2... 4.3 Medium
- novell netware Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8... 7.5 High
- mawashimono nikki HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via... 7.5 High
- apache http server, http server2.0a1, http server2.0a2 +7 more +9 more The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when... 4.3 Medium
- novell iprint open enterprise server 2 Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client... 7.5 High
- namazu Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of... 7.5 High
- brandon long clearsilver Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit... 7.5 High
- canonical ubuntu linux The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the... 7.5 High
- arora-browser arora Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate... 5.0 Medium
- adjam rekonq Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a... 4.3 Medium
- kde sc The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does... 4.3 Medium
- canonical ubuntu linux Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates,... 6.8 Medium
- codefuture cf image hosting script Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3... 4.3 Medium
- eaimproved com estateagent SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows... 7.5 High
- takeaweb com timereturns SQL injection vulnerability in the Time Returns (com_timereturns) component 2.0 and possibly... 7.5 High
- tom k forum userbar plugin SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum... 7.5 High
- foliovision fv wordpress flowplayer plugin Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin... 4.3 Medium
- zen-cart zen cart Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates... 4.3 Medium
- php, canonical ubuntu linux, debian linux +2 more Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4... 6.4 Medium
- zen-cart zen cart Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common... 4.3 Medium
- hastymail hastymail2 Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows... 4.3 Medium
- xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier... 4.3 Medium
- activedev active cms Cross-site scripting (XSS) vulnerability in the admin script in Active CMS 1.2 allows remote... 4.3 Medium
- jakcms Cross-site scripting (XSS) vulnerability in index.php in JAKCMS 2.0.4.1, and possibly other... 4.3 Medium
- john godley redirection plugin Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view... 4.3 Medium
- phorum Cross-site scripting (XSS) vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to... 4.3 Medium
- drupal petition node module Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for... 3.5 Low
- vtiger crm SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote... 7.5 High
- contao cms Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote... 4.3 Medium
- dolibarr erp\/crm Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 allow remote attackers to... 4.3 Medium
- rubyonrails rails, ruby on rails +1 more Cross-site Scripting vulnerability in i18n translations helper method 4.3 Medium
- ibm ts3100 tape library, ts3100 tape library firmware, ts3200 tape library +1 more +3 more The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60... 6.8 Medium
- combodo itop Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181... 4.3 Medium
- sunplus-tech dvr remote activex control DVRemoteAx.ax 2.1.0.39 in the DVR Remote ActiveX control allows remote attackers to execute... 9.3 High
- ibm websphere mq IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does... 1.9 Low
- linux kernel The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the... 4.0 Medium
- realnetworks realplayer Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to... 9.3 High
- realnetworks realplayer RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause... 9.3 High
- realnetworks realplayer RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a... 9.3 High
- realnetworks realplayer Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute... 9.3 High
- realnetworks realplayer RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a... 9.3 High
- realnetworks realplayer The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute... 9.3 High
- realnetworks realplayer The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703... 10.0 High
- realnetworks realplayer Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0... 10.0 High
- realnetworks realplayer RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a... 10.0 High
- realnetworks realplayer Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac... 10.0 High
- Show olderLoading…