Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
November

CVEs published in November 2011

324 vulnerabilities, 73 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft windows, windows 7, windows server 2003 +3 more +5 moreUnspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode...CVE-2011-3402In KEVEPSS 78.3%8.8 HighNovember 4, 2011
gnome ifcfg-rh plug-inIncomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c...CVE-2011-3364Fix available6.9 MediumNovember 4, 2011
schneider-electric monitor pro, opc factory server, pl7 pro +3 more +5 moreBuffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6...CVE-2011-33307.2 HighNovember 4, 2011
pureftpd pure-ftpdDirectory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running...CVE-2011-31713.6 LowNovember 4, 2011
hp hp-ux containersUnspecified vulnerability in HP-UX Containers (formerly HP-UX Secure Resource Partitions (SRP)) A...CVE-2011-31646.8 MediumNovember 4, 2011
e107Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier...CVE-2011-1513Public exploit7.5 HighNovember 4, 2011
maharaMahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote...CVE-2011-41186.0 MediumNovember 4, 2011
maharaCross-site request forgery (CSRF) vulnerability in Mahara before 1.4.1 allows remote attackers to...CVE-2011-27736.8 MediumNovember 4, 2011
maharaThe get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly...CVE-2011-27725.0 MediumNovember 4, 2011
maharaMultiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers...CVE-2011-27714.3 MediumNovember 4, 2011
courseforum projectforumCross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote...CVE-2011-42774.3 MediumNovember 3, 2011
controlsystemworks csworksThe LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of...CVE-2011-39965.0 MediumNovember 3, 2011
skyarc autotagging, duplicateentry, mailpack +2 more +4 moreCross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the...CVE-2011-39946.8 MediumNovember 3, 2011
skyarc autotagging, duplicateentry, mailpack +2 more +4 moreSKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and...CVE-2011-39935.5 MediumNovember 3, 2011
dlink des-3800, dwl-2100ap, dwl-3200ap +3 more +5 moreBuffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4...CVE-2011-399210.0 HighNovember 3, 2011
daemon-tools daemon toolsdtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro...CVE-2011-39874.9 MediumNovember 3, 2011
pligg cmsCross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject...CVE-2011-39864.3 MediumNovember 3, 2011
wiresharkHeap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file...CVE-2011-4102Fix available4.3 MediumNovember 3, 2011
wiresharkThe dissect_infiniband_common function in epan/dissectors/packet-infiniband.c in the Infiniband...CVE-2011-4101Fix available4.3 MediumNovember 3, 2011
wiresharkThe csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in...CVE-2011-4100Fix available4.3 MediumNovember 3, 2011
roundcube webmailinclude/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used,...CVE-2011-4078Fix available5.0 MediumNovember 3, 2011
phpThe is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes...CVE-2011-33797.5 HighNovember 3, 2011
ark-web a-form pc, a-form pc mobile +1 moreCross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for...CVE-2011-42744.3 MediumNovember 3, 2011
goahead webserverMultiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote...CVE-2011-4273Public exploit4.3 MediumNovember 3, 2011
cisco small business srp521w, small business srp541w, small business srp520 series firmware +5 more +7 moreCross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration...CVE-2011-40059.3 HighNovember 3, 2011
tasofro touhou-hisoutenUnspecified vulnerability in Twilight Frontier Touhou Hisouten 1.06 and earlier allows remote...CVE-2011-39955.0 MediumNovember 3, 2011
ark-web a-form, a-form bamboo, a-form pc +1 more +3 moreThe A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile...CVE-2011-26765.5 MediumNovember 3, 2011
sellatsite smart asp surveyCross-site scripting (XSS) vulnerability in poll/default.asp in Smart ASP Survey allows remote...CVE-2010-5045Public exploit4.3 MediumNovember 2, 2011
kanich com searchlogSQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0...CVE-2010-5044Public exploit6.0 MediumNovember 2, 2011
blueconstantmedia com djartgallerySQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla!...CVE-2010-5043Public exploit6.0 MediumNovember 2, 2011
blueconstantmedia com djartgalleryCross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1...CVE-2010-5042Public exploit4.3 MediumNovember 2, 2011
john bradshaw np gallery pluginSQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote...CVE-2010-5041Public exploit7.5 HighNovember 2, 2011
john bradshaw np gallery pluginPHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery...CVE-2010-5040Public exploit6.8 MediumNovember 2, 2011
scriptsfeed recipes listing portalSQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0...CVE-2010-5039Public exploit7.5 HighNovember 2, 2011
groonesworld simple contact formPHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form...CVE-2010-50387.5 HighNovember 2, 2011
michau enterprises sensesites commonsense cmsSQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers...CVE-2010-5037Public exploit7.5 HighNovember 2, 2011
iscripts eswapSQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to...CVE-2010-5036Public exploit7.5 HighNovember 2, 2011
iscripts eswapCross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote...CVE-2010-5035Public exploit4.3 MediumNovember 2, 2011
iscripts easybillerSQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote...CVE-2010-5034Public exploit7.5 HighNovember 2, 2011
fuseboxSQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to...CVE-2010-5033Public exploit7.5 HighNovember 2, 2011
tamlyncreative com bfquiztrialSQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla!...CVE-2010-5032Public exploit7.5 HighNovember 2, 2011
fileniceCross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to...CVE-2010-50314.3 MediumNovember 2, 2011
codefabrik ecomat cmsCross-site scripting (XSS) vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers...CVE-2010-50304.3 MediumNovember 2, 2011
codefabrik ecomat cmsSQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute...CVE-2010-5029Public exploit7.5 HighNovember 2, 2011
harmistechnology com jejobSQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla!...CVE-2010-5028Public exploit7.5 HighNovember 2, 2011
sfiab science fair in a boxCross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6...CVE-2010-5027Public exploit4.3 MediumNovember 2, 2011
sfiab science fair in a boxSQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0...CVE-2010-5026Public exploit6.8 MediumNovember 2, 2011
cutesite cmsCross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0...CVE-2010-5025Public exploit4.3 MediumNovember 2, 2011
cutesite cmsSQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote...CVE-2010-5024Public exploit6.0 MediumNovember 2, 2011
cramerdev digital interchange calendarSQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote...CVE-2010-5023Public exploit7.5 HighNovember 2, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open