CVEs

346,414 total · page 5984 of 6,929

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2011-2854	Google Chrome	0.00	—	0.02	Sep 19, 2011	Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."
CVE-2011-2853	Google Chrome	0.00	—	0.01	Sep 19, 2011	Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.
CVE-2011-2852	Google Chrome	0.00	—	0.01	Sep 19, 2011	Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-2851	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2850	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2849	Google Chrome	0.00	—	0.01	Sep 19, 2011	The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVE-2011-2848	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button.
CVE-2011-2847	Google Chrome	0.00	—	0.02	Sep 19, 2011	Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVE-2011-2846	Google Chrome	0.00	—	0.02	Sep 19, 2011	Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling.
CVE-2011-2844	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2843	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2842	Google Chrome	0.00	—	0.01	Sep 19, 2011	The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors.
CVE-2011-2841	Google Chrome	0.03	—	0.04	Sep 19, 2011	Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVE-2011-2840	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interaction."
CVE-2011-2838	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote attack vectors.
CVE-2011-2837	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors.
CVE-2011-2836	Google Chrome	0.00	—	0.01	Sep 19, 2011	Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content.
CVE-2011-2835	Google Chrome	0.00	—	0.00	Sep 19, 2011	Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the certificate cache.
CVE-2011-2834	Google Chrome	0.00	—	0.02	Sep 19, 2011	Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVE-2011-2738	Cisco Systems, Inc. Unified Operations Manager	0.01	—	0.11	Sep 19, 2011	Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix…
CVE-2011-1740	EMC Corporation Avamar	0.00	—	0.01	Sep 19, 2011	EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.
CVE-2011-3503	Interactivedata Esignal	0.00	—	0.04	Sep 16, 2011	Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo…
CVE-2011-3502	Cogentdatahub DataHub	0.03	—	0.06	Sep 16, 2011	The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).
CVE-2011-3501	Cogentdatahub DataHub	0.03	—	0.03	Sep 16, 2011	Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large Content-Length value.
CVE-2011-3500	Cogentdatahub DataHub	0.00	—	0.03	Sep 16, 2011	Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
CVE-2011-3499	Progea Movicon	0.04	—	0.16	Sep 16, 2011	Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
CVE-2011-3498	Progea Movicon	0.04	—	0.10	Sep 16, 2011	Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
CVE-2011-3497	Measuresoft Scadapro	0.08	—	0.59	Sep 16, 2011	service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
CVE-2011-3496	Measuresoft Scadapro	0.04	—	0.14	Sep 16, 2011	service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.
CVE-2011-3495	Measuresoft Scadapro	0.04	—	0.11	Sep 16, 2011	Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.
CVE-2011-3494	Interactivedata Esignal	0.07	—	0.56	Sep 16, 2011	WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName…
CVE-2011-3493	Cogentdatahub DataHub	0.04	—	0.08	Sep 16, 2011	Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4)…
CVE-2011-3492	Azeotech Daqfactory	0.09	—	0.71	Sep 16, 2011	Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
CVE-2011-3491	Progea Movicon Powerhmi	0.04	—	0.17	Sep 16, 2011	Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
CVE-2011-3490	Measuresoft Scadapro	0.06	—	0.36	Sep 16, 2011	Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command.
CVE-2011-3489	Rockwellautomation Rslogix	0.04	—	0.09	Sep 16, 2011	RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) "a memset zero overflow" or (2) an out-of-bounds read, related…
CVE-2011-3488	Equis Metastock	0.03	—	0.05	Sep 16, 2011	Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.
CVE-2011-3487	Carel Plantvisor	0.04	—	0.07	Sep 16, 2011	Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
CVE-2011-3486	Beckhoff Twincat	0.07	—	0.51	Sep 16, 2011	Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
CVE-2011-3321	Siemens Foundation Wincc Flexible Runtime	0.01	—	0.07	Sep 16, 2011	Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a…
CVE-2011-3211	Bcfg2 Bcfg2	0.00	—	0.05	Sep 16, 2011	The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
CVE-2011-3322	Scadatec Procyon SCADA	0.08	—	0.65	Sep 15, 2011	Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an…
CVE-2011-2671	9dotppnet Megalith	0.00	—	0.02	Sep 15, 2011	Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknown vectors.
CVE-2011-3394	Myrephp Real Estate Software	0.03	—	0.01	Sep 15, 2011	SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2011-3393	Myrephp Real Estate Software	0.03	—	0.01	Sep 15, 2011	Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the (1) country1, (2) state1, or (3) city1 parameter.
CVE-2011-2442	Adobe Inc. Acrobat	0.00	—	0.05	Sep 15, 2011	Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error vulnerability."
CVE-2011-2441	Adobe Inc. Acrobat	0.01	—	0.08	Sep 15, 2011	Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2440	Adobe Inc. Acrobat	0.00	—	0.05	Sep 15, 2011	Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2439	Adobe Inc. Acrobat	0.00	—	0.05	Sep 15, 2011	Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "memory leakage condition vulnerability."
CVE-2011-2438	Adobe Inc. Acrobat	0.00	—	0.06	Sep 15, 2011	Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.

CVE-2011-2854Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.02
Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."
CVE-2011-2853Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.
CVE-2011-2852Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-2851Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2850Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2849Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVE-2011-2848Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button.
CVE-2011-2847Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.02
Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVE-2011-2846Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.02
Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling.
CVE-2011-2844Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2843Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2842Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors.
CVE-2011-2841Sep 19, 2011
Google
Chrome
risk 0.03cvss —epss 0.04
Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVE-2011-2840Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interaction."
CVE-2011-2838Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote attack vectors.
CVE-2011-2837Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors.
CVE-2011-2836Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.01
Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content.
CVE-2011-2835Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.00
Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the certificate cache.
CVE-2011-2834Sep 19, 2011
Google
Chrome
risk 0.00cvss —epss 0.02
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVE-2011-2738Sep 19, 2011
Cisco Systems, Inc.
Unified Operations Manager
risk 0.01cvss —epss 0.11
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix…
CVE-2011-1740Sep 19, 2011
EMC Corporation
Avamar
risk 0.00cvss —epss 0.01
EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.
CVE-2011-3503Sep 16, 2011
Interactivedata
Esignal
risk 0.00cvss —epss 0.04
Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo…
CVE-2011-3502Sep 16, 2011
Cogentdatahub
DataHub
risk 0.03cvss —epss 0.06
The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).
CVE-2011-3501Sep 16, 2011
Cogentdatahub
DataHub
risk 0.03cvss —epss 0.03
Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large Content-Length value.
CVE-2011-3500Sep 16, 2011
Cogentdatahub
DataHub
risk 0.00cvss —epss 0.03
Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
CVE-2011-3499Sep 16, 2011
Progea
Movicon
risk 0.04cvss —epss 0.16
Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
CVE-2011-3498Sep 16, 2011
Progea
Movicon
risk 0.04cvss —epss 0.10
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
CVE-2011-3497Sep 16, 2011
Measuresoft
Scadapro
risk 0.08cvss —epss 0.59
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
CVE-2011-3496Sep 16, 2011
Measuresoft
Scadapro
risk 0.04cvss —epss 0.14
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.
CVE-2011-3495Sep 16, 2011
Measuresoft
Scadapro
risk 0.04cvss —epss 0.11
Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.
CVE-2011-3494Sep 16, 2011
Interactivedata
Esignal
risk 0.07cvss —epss 0.56
WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName…
CVE-2011-3493Sep 16, 2011
Cogentdatahub
DataHub
risk 0.04cvss —epss 0.08
Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4)…
CVE-2011-3492Sep 16, 2011
Azeotech
Daqfactory
risk 0.09cvss —epss 0.71
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
CVE-2011-3491Sep 16, 2011
Progea
Movicon Powerhmi
risk 0.04cvss —epss 0.17
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
CVE-2011-3490Sep 16, 2011
Measuresoft
Scadapro
risk 0.06cvss —epss 0.36
Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command.
CVE-2011-3489Sep 16, 2011
Rockwellautomation
Rslogix
risk 0.04cvss —epss 0.09
RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) "a memset zero overflow" or (2) an out-of-bounds read, related…
CVE-2011-3488Sep 16, 2011
Equis
Metastock
risk 0.03cvss —epss 0.05
Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.
CVE-2011-3487Sep 16, 2011
Carel
Plantvisor
risk 0.04cvss —epss 0.07
Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
CVE-2011-3486Sep 16, 2011
Beckhoff
Twincat
risk 0.07cvss —epss 0.51
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
CVE-2011-3321Sep 16, 2011
Siemens Foundation
Wincc Flexible Runtime
risk 0.01cvss —epss 0.07
Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a…
CVE-2011-3211Sep 16, 2011
Bcfg2
Bcfg2
risk 0.00cvss —epss 0.05
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
CVE-2011-3322Sep 15, 2011
Scadatec
Procyon SCADA
risk 0.08cvss —epss 0.65
Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an…
CVE-2011-2671Sep 15, 2011
9dotppnet
Megalith
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknown vectors.
CVE-2011-3394Sep 15, 2011
Myrephp
Real Estate Software
risk 0.03cvss —epss 0.01
SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2011-3393Sep 15, 2011
Myrephp
Real Estate Software
risk 0.03cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the (1) country1, (2) state1, or (3) city1 parameter.
CVE-2011-2442Sep 15, 2011
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.05
Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error vulnerability."
CVE-2011-2441Sep 15, 2011
Adobe Inc.
Acrobat
risk 0.01cvss —epss 0.08
Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2440Sep 15, 2011
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.05
Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2439Sep 15, 2011
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.05
Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "memory leakage condition vulnerability."
CVE-2011-2438Sep 15, 2011
Adobe Inc.
Acrobat
risk 0.00cvss —epss 0.06
Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.