Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
November

CVEs published in November 2011

324 vulnerabilities, 73 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

hp event monitoring serviceUnspecified vulnerability in System Administration Manager (SAM) in EMS before A.04.20.11.04_01...CVE-2011-41596.8 MediumNovember 19, 2011
broadcom directoryUnspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before...CVE-2011-38495.0 MediumNovember 19, 2011
spip Debianspip - severalDSA-2349-1Fix availableNo scoreNovember 19, 2011
linux kernel, suse linux enterprise server +1 moreThe cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux...CVE-2011-41322.1 LowNovember 18, 2011
owasp-java-html-sanitizer project owasp-java-html-sanitizerOWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabledCVE-2011-4457Fix available2.6 LowNovember 17, 2011
google chromeGoogle V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a...CVE-2011-39007.5 HighNovember 17, 2011
freebsdDirectory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1...CVE-2011-4122Public exploit6.9 MediumNovember 17, 2011
phpmyadmin, debian linux, fedoraproject fedora +2 morephpMyAdmin vulnerable to XML external entity (XXE) injection attackCVE-2011-4107Public exploitFix availableEPSS 12.7%6.5 MediumNovember 17, 2011
squid-cache squidThe idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows...CVE-2011-4096Fix availableEPSS 37.2%5.0 MediumNovember 17, 2011
xelerance openswanUse-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0...CVE-2011-4073Fix available4.0 MediumNovember 17, 2011
phpmyadminphpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive...CVE-2011-3646Fix available5.0 MediumNovember 17, 2011
clamavThe bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service ...CVE-2011-3627Fix available4.3 MediumNovember 17, 2011
xelerance openswanOpenswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer...CVE-2011-3380Fix available5.0 MediumNovember 17, 2011
systemtapThe insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool ...CVE-2011-2503Fix available3.7 LowNovember 17, 2011
hp network node manager iCross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows...CVE-2011-41564.3 MediumNovember 16, 2011
hp network node manager iCross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows...CVE-2011-41554.3 MediumNovember 16, 2011
hp directories support for proliant management processorsUnspecified vulnerability in HP Directories Support for ProLiant Management Processors 3.10 and 3...CVE-2011-41584.0 MediumNovember 16, 2011
hp storageworks p4000 virtual san appliance, centralized management console software, san\/iq +2 moreStack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000...CVE-2011-4157EPSS 13.2%10.0 HighNovember 16, 2011
isc bindquery.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5,...CVE-2011-4313Fix availableEPSS 16.2%5.0 MediumNovember 16, 2011
apple mac os xThe kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x...CVE-2011-1516Public exploit7.6 HighNovember 15, 2011
apple mac os xThe nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions...CVE-2008-73037.6 HighNovember 15, 2011
maharaThe "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated...CVE-2011-27744.0 MediumNovember 15, 2011
proftpdUse-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote...CVE-2011-4130Fix availableEPSS 12.6%9.0 HighNovember 15, 2011
dell kace k2000 systems deployment applianceMultiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the...CVE-2011-44363.5 LowNovember 12, 2011
dell kace k2000 systems deployment applianceThe Dell KACE K2000 System Deployment Appliance has a default username and password for the read...CVE-2011-40484.3 MediumNovember 12, 2011
dell kace k2000 systems deployment applianceThe Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary...CVE-2011-40479.3 HighNovember 12, 2011
dell kace k2000 systems deployment applianceThe Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext...CVE-2011-40465.0 MediumNovember 12, 2011
ibm db2 tools for z\/osThe web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query...CVE-2011-44355.0 MediumNovember 11, 2011
microsoft windows 7, windows server 2008 +1 moreMicrosoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce...CVE-2011-44343.6 LowNovember 11, 2011
apache tomcatorg/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not...CVE-2011-33764.4 MediumNovember 11, 2011
ibm aixIBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls,...CVE-2011-13754.9 MediumNovember 11, 2011
apple iphone osThe kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an...CVE-2011-34427.2 HighNovember 11, 2011
apple iphone oslibinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows...CVE-2011-34414.3 MediumNovember 11, 2011
apple ipad2, iphone os +1 moreThe Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the...CVE-2011-34401.2 LowNovember 11, 2011
apple iphone os, suse linux enterprise desktop, linux enterprise server +1 more +3 moreFreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary...CVE-2011-3439Fix available9.3 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-246010.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245910.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-24589.3 HighNovember 11, 2011
adobe air, flash player +1 moreStack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55...CVE-2011-245710.0 HighNovember 11, 2011
adobe air, flash player +1 moreBuffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows,...CVE-2011-245610.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245510.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245410.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245310.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245210.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245110.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-245010.0 HighNovember 11, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,...CVE-2011-244510.0 HighNovember 11, 2011
google chromeGoogle Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not...CVE-2011-38987.5 HighNovember 11, 2011
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote...CVE-2011-38976.8 MediumNovember 11, 2011
google chromeBuffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of...CVE-2011-38967.5 HighNovember 11, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open