Skip to content
OpenAdvisories

Archive

5 December 2011

Vulnerabilities first published on this day (UTC), newest first.

← November 2011 2011 / December /5 January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Unscored —
    CVE-2011-1932

    Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers …

    widelands Debian
  • Unscored —
    CVE-2011-4052

    Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio…

  • Unscored —
    CVE-2011-4162 Public exploit

    The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless m…

  • Unscored —
    CVE-2011-4675

    The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (…

    widelands Debian
  • Medium —
    CVE-2011-4356

    Celery local privilege escalation vulnerability

    Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gai…

    celery celery Debian PyPI
  • Unscored —
    CVE-2011-4543

    Multiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2011-4051 Public exploit EPSS 68%

    CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require a…

  • Unscored —
    CVE-2011-2397

    The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted…