CVEs published October 21, 2011
12 CVEs were published on October 21, 2011: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 12
- CVE-2011-2677Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time c
- CVE-2011-2713oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via
- CVE-2011-3988SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL com
- CVE-2011-4024Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary w
- CVE-2011-4026SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVE-2009-5102SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bp
- CVE-2009-5103Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the
- CVE-2010-4966Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML
- CVE-2010-4967SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artI
- CVE-2011-0290The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange
- CVE-2011-3340SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP he
- CVE-2011-4063chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize va