By publication date

Exploited and new serious CVEs: October 2011

38 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
43Plan	CVE-2011-3271No exploit	Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code orcisco · ios pre-auth RCE	Critical10.0	—	10.7%	Oct 3, 2011
40Plan	CVE-2011-3976Weaponized	Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response tammsoft · scriptftp · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	30.5%	Oct 4, 2011
33Monitor	CVE-2011-3981Proof of concept	PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbiwordpress · wordpress · CWE-94 pre-auth RCE	High7.5	—	10.0%	Oct 4, 2011
41Plan	CVE-2011-2443Proof of concept	Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruptionadobe · photoshop elements · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.6%	Oct 4, 2011
47Plan	CVE-2011-3368Weaponized	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interaapache · http server · CWE-20 Pre-auth	Medium5.0	—	90.7%	Oct 5, 2011
40Plan	CVE-2011-3305Weaponized	Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files viacisco · nac manager · CWE-22 Pre-auth Path traversal	High7.8	—	21.5%	Oct 6, 2011
45Plan	CVE-2010-4931Proof of concept	Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .php-fusion · php-fusion · CWE-22 pre-auth RCE Path traversal	Critical10.0	—	15.6%	Oct 9, 2011
35Monitor	CVE-2011-2189Proof of concept	net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namelinux · linux kernel · CWE-400 Pre-auth Denial of service	High7.5	—	17.8%	Oct 10, 2011
60This week	CVE-2011-3587Weaponized	Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackeplone · plone pre-auth RCE	Critical9.3	—	78.0%	Oct 10, 2011
40Plan	CVE-2011-1247No exploit	Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003microsoft · windows 2003 server Pre-auth	Critical9.3	—	11.0%	Oct 11, 2011
41Plan	CVE-2011-1253No exploit	Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritancemicrosoft · .net framework · CWE-264 pre-auth RCE	Critical9.3	—	13.2%	Oct 11, 2011
20Monitor	CVE-2011-1895No exploit	CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackmicrosoft · forefront unified access gateway · CWE-94 pre-auth RCE XSS	Medium4.3	—	11.1%	Oct 11, 2011
42Plan	CVE-2011-1969No exploit	Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a smicrosoft · forefront unified access gateway · CWE-94 pre-auth RCE	Critical9.3	—	17.3%	Oct 11, 2011
42Plan	CVE-2011-1993No exploit	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer pre-auth RCE	Critical9.3	—	17.5%	Oct 11, 2011
46Plan	CVE-2011-1995No exploit	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	28.9%	Oct 11, 2011
55Plan	CVE-2011-1996Weaponized	Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer pre-auth RCE	Critical9.3	—	58.8%	Oct 11, 2011
41Plan	CVE-2011-1997No exploit	Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessimicrosoft · internet explorer · CWE-20 pre-auth RCE	Critical9.3	—	14.4%	Oct 11, 2011
43Plan	CVE-2011-1998No exploit	Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessimicrosoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	21.2%	Oct 11, 2011
45Plan	CVE-2011-1999Proof of concept	Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectmicrosoft · internet explorer pre-auth RCE	Critical9.3	—	26.7%	Oct 11, 2011
43Plan	CVE-2011-2000No exploit	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer pre-auth RCE	Critical9.3	—	18.8%	Oct 11, 2011
50Plan	CVE-2011-2001No exploit	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer pre-auth RCE	Critical9.3	—	43.1%	Oct 11, 2011
45Plan	CVE-2011-2003Proof of concept	Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wimicrosoft · windows 2003 server · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	26.5%	Oct 11, 2011
71This week	CVE-2011-2005Weaponized	afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input microsoft · windows server 2003 Local privilege escalation	High7.8	KEV	31.7%	Oct 11, 2011
27Monitor	CVE-2011-2007Proof of concept	Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server microsoft · host integration server · CWE-20 Pre-auth Denial of service	Medium5.0	—	23.0%	Oct 11, 2011
26Monitor	CVE-2011-2008No exploit	Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server microsoft · host integration server · CWE-20 Pre-auth Denial of service	Medium5.0	—	21.3%	Oct 11, 2011
25Monitor	CVE-2011-2012No exploit	Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which almicrosoft · forefront unified access gateway · CWE-20 Pre-auth Denial of service	Medium5.0	—	16.5%	Oct 11, 2011
42Plan	CVE-2011-3230Weaponized	Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitraryapple · safari · CWE-264 pre-auth RCE	Medium6.8	—	49.3%	Oct 14, 2011
44Plan	CVE-2011-3156No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
44Plan	CVE-2011-3157No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
44Plan	CVE-2011-3158No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
44Plan	CVE-2011-3159No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
44Plan	CVE-2011-3160No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
44Plan	CVE-2011-3161No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
44Plan	CVE-2011-3162No exploit	Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackershp · data protector for personal computers pre-auth RCE	Critical10.0	—	11.6%	Oct 19, 2011
98Now	CVE-2011-3544Weaponized	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remotoracle · jdk · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	KEV	96.6%	Oct 19, 2011
53Plan	CVE-2011-3556Weaponized	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 oracle · jrockit Pre-auth	High7.5	—	76.4%	Oct 19, 2011
41Plan	CVE-2011-3310No exploit	The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Secucisco · ciscoworks common services · CWE-94 RCE	Critical9.0	—	15.1%	Oct 19, 2011
39Monitor	CVE-2011-3315Proof of concept	Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.cisco · unified ip interactive voice response · CWE-22 Pre-auth Path traversal	High7.8	—	25.7%	Oct 27, 2011

CVE-2011-3271
43Plan
Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
cisco · iosOct 3, 2011
CVE-2011-3976
40Plan
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response t
MediumCVSS 6.8WeaponizedEPSS 30%
- pre-auth RCE
- Memory safety
ammsoft · scriptftpOct 4, 2011
CVE-2011-3981
33Monitor
PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbi
HighCVSS 7.5Proof of conceptEPSS 10%
- pre-auth RCE
wordpress · wordpressOct 4, 2011
CVE-2011-2443
41Plan
Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption
CriticalCVSS 9.3Proof of conceptEPSS 13%
- pre-auth RCE
- Memory safety
adobe · photoshop elementsOct 4, 2011
CVE-2011-3368
47Plan
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly intera
MediumCVSS 5.0WeaponizedEPSS 90%
- Pre-auth
apache · http serverOct 5, 2011
CVE-2011-3305
40Plan
Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via
HighCVSS 7.8WeaponizedEPSS 21%
- Pre-auth
- Path traversal
cisco · nac managerOct 6, 2011
CVE-2010-4931
45Plan
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .
CriticalCVSS 10.0Proof of conceptEPSS 15%
- pre-auth RCE
- Path traversal
php-fusion · php-fusionOct 9, 2011
CVE-2011-2189
35Monitor
net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network name
HighCVSS 7.5Proof of conceptEPSS 17%
- Pre-auth
- Denial of service
linux · linux kernelOct 10, 2011
CVE-2011-3587
60This week
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attacke
CriticalCVSS 9.3WeaponizedEPSS 78%
- pre-auth RCE
plone · ploneOct 10, 2011
CVE-2011-1247
40Plan
Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003
CriticalCVSS 9.3No exploitEPSS 11%
- Pre-auth
microsoft · windows 2003 serverOct 11, 2011
CVE-2011-1253
41Plan
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
microsoft · .net frameworkOct 11, 2011
CVE-2011-1895
20Monitor
CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attack
MediumCVSS 4.3No exploitEPSS 11%
- pre-auth RCE
- XSS
microsoft · forefront unified access gatewayOct 11, 2011
CVE-2011-1969
42Plan
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a s
CriticalCVSS 9.3No exploitEPSS 17%
- pre-auth RCE
microsoft · forefront unified access gatewayOct 11, 2011
CVE-2011-1993
42Plan
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 17%
- pre-auth RCE
microsoft · internet explorerOct 11, 2011
CVE-2011-1995
46Plan
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · internet explorerOct 11, 2011
CVE-2011-1996
55Plan
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3WeaponizedEPSS 58%
- pre-auth RCE
microsoft · internet explorerOct 11, 2011
CVE-2011-1997
41Plan
Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi
CriticalCVSS 9.3No exploitEPSS 14%
- pre-auth RCE
microsoft · internet explorerOct 11, 2011
CVE-2011-1998
43Plan
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi
CriticalCVSS 9.3No exploitEPSS 21%
- pre-auth RCE
- Memory safety
microsoft · internet explorerOct 11, 2011
CVE-2011-1999
45Plan
Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vect
CriticalCVSS 9.3Proof of conceptEPSS 26%
- pre-auth RCE
microsoft · internet explorerOct 11, 2011
CVE-2011-2000
43Plan
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 18%
- pre-auth RCE
microsoft · internet explorerOct 11, 2011
CVE-2011-2001
50Plan
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 43%
- pre-auth RCE
microsoft · internet explorerOct 11, 2011
CVE-2011-2003
45Plan
Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wi
CriticalCVSS 9.3Proof of conceptEPSS 26%
- pre-auth RCE
- Memory safety
microsoft · windows 2003 serverOct 11, 2011
CVE-2011-2005
71This week
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input
HighCVSS 7.8KEVWeaponizedEPSS 31%
- Local privilege escalation
microsoft · windows server 2003Oct 11, 2011
CVE-2011-2007
27Monitor
Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server
MediumCVSS 5.0Proof of conceptEPSS 23%
- Pre-auth
- Denial of service
microsoft · host integration serverOct 11, 2011
CVE-2011-2008
26Monitor
Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server
MediumCVSS 5.0No exploitEPSS 21%
- Pre-auth
- Denial of service
microsoft · host integration serverOct 11, 2011
CVE-2011-2012
25Monitor
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which al
MediumCVSS 5.0No exploitEPSS 16%
- Pre-auth
- Denial of service
microsoft · forefront unified access gatewayOct 11, 2011
CVE-2011-3230
42Plan
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary
MediumCVSS 6.8WeaponizedEPSS 49%
- pre-auth RCE
apple · safariOct 14, 2011
CVE-2011-3156
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3157
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3158
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3159
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3160
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3161
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3162
44Plan
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · data protector for personal computersOct 19, 2011
CVE-2011-3544
98Now
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot
CriticalCVSS 9.8KEVWeaponizedEPSS 96%
- Pre-auth
- Broken access control (IDOR)
oracle · jdkOct 19, 2011
CVE-2011-3556
53Plan
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31
HighCVSS 7.5WeaponizedEPSS 76%
- Pre-auth
oracle · jrockitOct 19, 2011
CVE-2011-3310
41Plan
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Secu
CriticalCVSS 9.0No exploitEPSS 15%
- RCE
cisco · ciscoworks common servicesOct 19, 2011
CVE-2011-3315
39Monitor
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.
HighCVSS 7.8Proof of conceptEPSS 25%
- Pre-auth
- Path traversal
cisco · unified ip interactive voice responseOct 27, 2011