CVEs published in November 2011
324 vulnerabilities, 73 critical, 1 exploited.
- nicholas berry candidSQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute...7.5 High
- nicholas berry candidCross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to...4.3 Medium
- miniwork com canteenSQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla!...7.5 High
- metinfoCross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote...4.3 Medium
- techjoomla com socialadsSQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component...7.5 High
- brotherscripts auto dealerSQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows...7.5 High
- sourcefabric campsiteCross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote...4.3 Medium
- ypninc jokescriptSQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute...7.5 High
- wikiwebhelp wiki web helpSQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers...7.5 High
- brotherscripts business directorySQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory...7.5 High
- webmaster-tips com wmtpicSQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0...7.5 High
- investintech absolute pdf serverUnspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to...9.3 High
- investintech able2extract, able2extract server +1 moreUnspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote...9.3 High
- investintech able2docUnspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote...9.3 High
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function...9.3 High
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch...9.3 High
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write...9.3 High
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not properly restrict read operations during block data...9.3 High
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not properly restrict write operations, which allows remote...9.3 High
- oneorzero aimsSQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management...7.5 High
- oneorzero aimsOneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass...10.0 High
- phpmyadminCross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6...4.3 Medium
- infor eclient, enspire distribution management solution +1 moreSQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2...7.5 High
- cisco ios, unified communications manager +1 moreMemory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1...7.8 High