Archive
14 December 2011
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Remote Development Services (RDS) in Adobe ColdFusion 8.0 through 9.0.1 all…
-
Unscored —
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitr…
-
Unscored —
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not …
-
Unscored —CVE-2011-1508 EPSS 14%
Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, …
-
Unscored —CVE-2011-1983 EPSS 22%
Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 al…
-
Unscored —CVE-2011-1992 EPSS 19%
The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or …
-
Unscored —CVE-2011-4810 Public exploit
Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read …
-
Unscored —CVE-2011-4811 Public exploit
SQL injection vulnerability in pokaz_podkat.php in BestShopPro allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2011-4807 Public exploit
Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrar…
-
Unscored —CVE-2011-4806 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers…
-
Unscored —CVE-2011-4814 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to…
-
Unscored —CVE-2011-4801 Public exploit
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authenticat…
-
Unscored —CVE-2011-4809 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity) component before 1.01 for Joo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to…
-
Unscored —CVE-2011-4800 Public exploit
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and wr…
-
Unscored —CVE-2011-4803 Public exploit
SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute …
-
Unscored —CVE-2011-4813 Public exploit
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to rea…
-
Unscored —CVE-2011-4802 Public exploit
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to ex…
-
Unscored —
Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attac…
-
Unscored —CVE-2011-4808 Public exploit
SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attac…
-
Unscored —CVE-2011-4812 Public exploit
Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2011-3413 EPSS 20%
Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…
-
Unscored —CVE-2011-3412 EPSS 26%
Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Pub…
-
Unscored —
Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote …
-
Unscored —CVE-2011-3411 EPSS 27%
Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that levera…
-
Unscored —CVE-2011-3397 EPSS 20%
The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attack…
-
Unscored —CVE-2011-3404 EPSS 14%
Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering …
-
Unscored —
Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and S…
-
Unscored —CVE-2011-3410 EPSS 29%
Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2011-3396 EPSS 18%
Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via…
-
High 8.8CVE-2011-3406 EPSS 23%
Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directo…
-
Unscored —CVE-2011-3401 EPSS 21%
ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows…
-
Unscored —CVE-2011-3403 EPSS 21%
Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attacker…
-
Unscored —
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin Simpl…
-
Unscored —CVE-2011-2019 EPSS 11%
Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7…
-
Unscored —
The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, an…