Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
November

CVEs published in November 2011

324 vulnerabilities, 73 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

realnetworks realplayerThe RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703...CVE-2011-42529.3 HighNovember 24, 2011
realnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a...CVE-2011-42519.3 HighNovember 24, 2011
realnetworks realplayerUnspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac...CVE-2011-425010.0 HighNovember 24, 2011
realnetworks realplayerArray index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote...CVE-2011-424910.0 HighNovember 24, 2011
realnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a...CVE-2011-42489.3 HighNovember 24, 2011
realnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a...CVE-2011-42479.3 HighNovember 24, 2011
realnetworks realplayerThe AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703...CVE-2011-424610.0 HighNovember 24, 2011
realnetworks realplayerThe RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0...CVE-2011-424510.0 HighNovember 24, 2011
realnetworks realplayerHeap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0...CVE-2011-424410.0 HighNovember 24, 2011
google cr-48 chromebook, acer ac700 chromebook, google chrome os +1 more +3 moreMultiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700,...CVE-2011-454810.0 HighNovember 24, 2011
reviewboard review boardMultiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board...CVE-2011-43124.3 MediumNovember 24, 2011
hp operations agent, performance agent +1 moreUnspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX,...CVE-2011-41603.2 LowNovember 24, 2011
joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2011-4332Fix available4.3 MediumNovember 23, 2011
joomla joomla\!The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which...CVE-2011-43215.0 MediumNovember 23, 2011
mh products kleinanzeigenmarktSQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote...CVE-2010-5062Public exploit7.5 HighNovember 23, 2011
rsstaticSQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary...CVE-2010-50617.5 HighNovember 23, 2011
internet-works nus newssystemSQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute...CVE-2010-5060Public exploit7.5 HighNovember 23, 2011
cmscoutSQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute...CVE-2010-5059Public exploit7.5 HighNovember 23, 2011
alephsystem cms ariadnaSQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to...CVE-2010-5058Public exploit7.5 HighNovember 23, 2011
alephsystem cms ariadnaSQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to...CVE-2010-5057Public exploit7.5 HighNovember 23, 2011
gbu grafici com gbufacebookSQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla!...CVE-2010-5056Public exploit7.5 HighNovember 23, 2011
almnzmSQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute...CVE-2010-5055Public exploit7.5 HighNovember 23, 2011
jamwikiCross-site scripting (XSS) vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote...CVE-2010-50544.3 MediumNovember 23, 2011
php-shop-system com xobbixSQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote...CVE-2010-5053Public exploit7.5 HighNovember 23, 2011
get-simple getsimple cmsCross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows...CVE-2010-5052Public exploit4.3 MediumNovember 23, 2011
razorcmsCross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable...CVE-2010-5051Public exploit4.3 MediumNovember 23, 2011
zohocorp manageengine admanager plusCross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine...CVE-2010-50504.3 MediumNovember 23, 2011
zabbixSQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to...CVE-2010-5049Fix available7.5 HighNovember 23, 2011
joomlatune com jcommentsCross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments ...CVE-2010-5048Public exploit4.3 MediumNovember 23, 2011
v-eva press release scriptSQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to...CVE-2010-5047Public exploit7.5 HighNovember 23, 2011
ecocmsCross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject...CVE-2010-5046Public exploit4.3 MediumNovember 23, 2011
linux kernelStack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6...CVE-2011-43307.2 HighNovember 23, 2011
linux kernel, avaya 96x1 ip deskphone firmware +1 moreThe udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a...CVE-2011-43267.1 HighNovember 23, 2011
linux kernelThe user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local...CVE-2011-41102.1 LowNovember 23, 2011
dlink dir-685The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain...CVE-2011-45077.5 HighNovember 22, 2011
technicolor tg585 router, tg585 router firmware +1 moreThe UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3...CVE-2011-45067.5 HighNovember 22, 2011
alcatel speedtouch 5x6 router, speedtouch 5x6 router firmware +1 moreThe UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote...CVE-2011-45057.5 HighNovember 22, 2011
genmei mori pseudoics, zyxel p-330w router +1 moreThe UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote...CVE-2011-45047.5 HighNovember 22, 2011
broadcom linux, sitecom wl-111 +1 moreThe UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to...CVE-2011-45037.5 HighNovember 22, 2011
canyon-tech cn-wf512, cn-wf514, edimax 6114wg +9 more +11 moreThe UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25,...CVE-2011-450210.0 HighNovember 22, 2011
canyon-tech cn-wf512, cn-wf514, edimax 6114wg +9 more +11 moreThe UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25,...CVE-2011-450110.0 HighNovember 22, 2011
linksys wrt54gx, cisco linksys wrt54gx router firmware +1 moreThe UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is...CVE-2011-45007.5 HighNovember 22, 2011
linksys wrt54g, wrt54gs, cisco linksys wrt54g router firmware +1 more +3 moreThe UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware...CVE-2011-44997.5 HighNovember 22, 2011
zenprise device managerCross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x...CVE-2011-44986.8 MediumNovember 21, 2011
asus rt-n56u, rt-n56u firmware +1 moreQIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers...CVE-2011-44973.3 LowNovember 21, 2011
aviosoft dtv playerBuffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code...CVE-2011-4496Public exploitEPSS 11.1%9.3 HighNovember 21, 2011
njstar communicatorBuffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute...CVE-2011-4040Public exploitEPSS 65.3%10.0 HighNovember 21, 2011
ibm lotus mobile connectCross-site scripting (XSS) vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 allows remote...CVE-2011-44654.3 MediumNovember 19, 2011
vmware vcenter update managerThe default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter...CVE-2011-4404Public exploitEPSS 58.9%5.0 MediumNovember 19, 2011
montala resourcespaceResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote...CVE-2011-43115.0 MediumNovember 19, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open