Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
November

CVEs published in November 2011

324 vulnerabilities, 73 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

google chrome, debian linux +1 moreHeap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows...CVE-2011-3895Fix available7.5 HighNovember 11, 2011
google chromeGoogle Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote...CVE-2011-38947.5 HighNovember 11, 2011
google chromeGoogle Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers,...CVE-2011-3893Fix available5.0 MediumNovember 11, 2011
google chrome, debian linux +1 moreDouble free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows...CVE-2011-3892Fix available7.5 HighNovember 11, 2011
djangoproject pistonDjango-piston and Django-tastypie do not properly deserialize YAML dataCVE-2011-4103Fix available7.5 HighNovember 11, 2011
merethis centreonwww/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2...CVE-2011-44325.0 MediumNovember 10, 2011
merethis centreonDirectory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote...CVE-2011-4431Public exploit6.5 MediumNovember 10, 2011
plume-cms plume cmsCross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject...CVE-2011-39852.6 LowNovember 9, 2011
emc rsa key manager applianceEMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does...CVE-2011-27409.3 HighNovember 9, 2011
emc documentum eroomThe file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not...CVE-2011-27398.5 HighNovember 9, 2011
ibm db2Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager ...CVE-2011-13731.5 LowNovember 9, 2011
ibc.co.jp iwate portal barCross-site scripting (XSS) vulnerability in the RSS/Atom feed-reader implementation in Iwate...CVE-2011-39994.3 MediumNovember 9, 2011
apple webobjectsCross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote...CVE-2011-39984.3 MediumNovember 9, 2011
opengear acm5000 console server, cm4000 console server, im4004-5 console server +4 more +6 moreOpengear console servers with firmware before 2.2.1 allow remote attackers to bypass...CVE-2011-39977.5 HighNovember 9, 2011
mozilla firefox, thunderbird +1 moreMozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without...CVE-2011-36559.3 HighNovember 9, 2011
mozilla firefox, thunderbird +1 moreThe browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly...CVE-2011-365410.0 HighNovember 9, 2011
mozilla firefox, thunderbird +1 moreMozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with...CVE-2011-36535.0 MediumNovember 9, 2011
mozilla firefox, thunderbird +1 moreThe browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly...CVE-2011-365210.0 HighNovember 9, 2011
mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird...CVE-2011-365110.0 HighNovember 9, 2011
mozilla firefox, thunderbird +1 moreMozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in...CVE-2011-36492.6 LowNovember 9, 2011
openssl Debianopenssl - CA trust revocationDSA-2343-1Fix availableNo scoreNovember 9, 2011
mozilla firefox, thunderbird +1 moreMozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7...CVE-2011-36509.3 HighNovember 9, 2011
mozilla firefox, thunderbird +1 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and...CVE-2011-3648Fix available4.3 MediumNovember 9, 2011
mozilla firefox, thunderbird +1 moreThe JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not...CVE-2011-36479.3 HighNovember 9, 2011
nara institute of science and technology chasenBuffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted...CVE-2011-4000Fix available9.3 HighNovember 8, 2011
adobe shockwave playerThe TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute...CVE-2011-244910.0 HighNovember 8, 2011
adobe shockwave playerThe DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute...CVE-2011-244810.0 HighNovember 8, 2011
adobe shockwave playerAdobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a...CVE-2011-244710.0 HighNovember 8, 2011
adobe shockwave playerThe DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute...CVE-2011-244610.0 HighNovember 8, 2011
microsoft windows 7, windows server 2008, windows vista +2 moreUntrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft...CVE-2011-20169.3 HighNovember 8, 2011
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application...CVE-2011-2014EPSS 11.0%9.0 HighNovember 8, 2011
microsoft windows 7, windows server 2008, windows vista +2 moreInteger overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008...CVE-2011-2013Public exploitEPSS 32.3%10.0 HighNovember 8, 2011
microsoft windows 7, windows server 2008 +1 moreArray index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2...CVE-2011-2004EPSS 24.6%7.1 HighNovember 8, 2011
apache http serverThe ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x...CVE-2011-4415Public exploitFix available1.2 LowNovember 8, 2011
apache http serverInteger overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x...CVE-2011-3607Public exploitFix available4.4 MediumNovember 8, 2011
hp tcp ip services openvmsUnspecified vulnerability in the SMTP service implementation in HP TCP/IP Services 5.6 and 5.7...CVE-2011-31695.0 MediumNovember 7, 2011
hp tcp ip services openvmsUnspecified vulnerability in the POP and IMAP service implementations in HP TCP/IP Services 5.6...CVE-2011-31685.0 MediumNovember 7, 2011
moodleMoodle XSS VulnerabilityCVE-2011-4306Fix available4.3 MediumNovember 7, 2011
moodlemessage/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a...CVE-2011-43054.0 MediumNovember 7, 2011
moodlemnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x...CVE-2011-43026.8 MediumNovember 7, 2011
moodleMoodle Allows Modification of ConstantsCVE-2011-4301Fix available5.0 MediumNovember 7, 2011
moodleMoodle Open Redirect Via Error MessagesCVE-2011-4294Fix available5.8 MediumNovember 7, 2011
xenXen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host...CVE-2011-1166Fix available5.5 MediumNovember 6, 2011
robert luberda man2htmlCross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other...CVE-2011-2770Fix available4.3 MediumNovember 5, 2011
sir gnuboardSQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers...CVE-2011-4066Public exploit7.5 HighNovember 4, 2011
ffftpUntrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute...CVE-2011-39919.3 HighNovember 4, 2011
hiroyuki oyama dbd\SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute...CVE-2011-39897.5 HighNovember 4, 2011
conkyThe getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to...CVE-2011-3616Fix available6.3 MediumNovember 4, 2011
pidgin libpurple, pidgin +1 moreThe g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier,...CVE-2011-3594Fix available4.3 MediumNovember 4, 2011
nlnetlabs ldnsHeap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11...CVE-2011-3581Fix available6.8 MediumNovember 4, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open