# CVEs published 2011-10-21

12 CVEs were published on October 21, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2677](https://cve.now/CVE-2011-2677.md): Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time c (no CVSS)
- [CVE-2011-2713](https://cve.now/CVE-2011-2713.md): oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2011-3988](https://cve.now/CVE-2011-3988.md): SQL injection vulnerability in data/class/SC\_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2011-4024](https://cve.now/CVE-2011-4024.md): Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2011-4026](https://cve.now/CVE-2011-4026.md): SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2009-5102](https://cve.now/CVE-2009-5102.md): SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bp (no CVSS)
- [CVE-2009-5103](https://cve.now/CVE-2009-5103.md): Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-4966](https://cve.now/CVE-2010-4966.md): Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-4967](https://cve.now/CVE-2010-4967.md): SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artI (no CVSS)
- [CVE-2011-0290](https://cve.now/CVE-2011-0290.md): The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange (no CVSS)
- [CVE-2011-3340](https://cve.now/CVE-2011-3340.md): SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP he (no CVSS)
- [CVE-2011-4063](https://cve.now/CVE-2011-4063.md): chan\_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize va (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-10-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.