Skip to content
OpenAdvisories

Archive

7 December 2011

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —

    Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute …

  • Unscored —

    Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Exp…

  • Unscored —

    Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote atta…

  • Unscored —

    Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violation…

  • Unscored —

    Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecifie…

  • Unscored —

    Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified co…

  • Unscored —

    Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe …

  • Unscored —

    The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote att…

  • Unscored —
    CVE-2011-4684 Public exploit

    Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vect…

  • Unscored —

    Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations dur…

  • Unscored —

    WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data ab…

  • Unscored —

    Opera before 11.60 does not properly consider the number of . (dot) characters that conventionally exist in domain name…

  • Unscored —

    vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows re…

  • Unscored —

    Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a de…

  • Unscored —

    Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violatio…

  • Unscored —

    Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME…

  • High 8.8
    CVE-2011-2462 Exploited Public exploit EPSS 89%

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …

    KEV Jun 8, 2022
  • Unscored —
    CVE-2002-2435 EPSS 14%

    The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle…

  • Unscored —

    The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not …

  • Unscored —

    The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey be…

  • Unscored —
    CVE-2010-5071 EPSS 13%

    The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of valu…

  • Unscored —

    The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object return…

  • Unscored —

    The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which…

  • Unscored —

    The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object re…

  • Unscored —

    The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object r…

  • Unscored —

    The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, …

  • Unscored —

    The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different co…