Skip to content
OpenAdvisories

Archive

15 December 2011

Vulnerabilities first published on this day (UTC), newest first.

← November 2011 2011 / December /15 January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2011-4606

    Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via…

    rocksndiamonds Debian
  • Unscored —
    CVE-2011-4835 Public exploit

    Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbit…

  • Unscored —
    CVE-2011-4831 Public exploit

    Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to…

  • Unscored —
    CVE-2011-4598

    The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x befor…

    asterisk Debian
  • Unscored —
    CVE-2011-4827

    Multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2011-4823 Public exploit

    Multiple SQL injection vulnerabilities in Vik Real Estate (com_vikrealestate) component 1.0 for Joomla! allow remote at…

  • Unscored —
    CVE-2011-4597

    The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.…

    asterisk Debian
  • Unscored —
    CVE-2011-4833 Public exploit

    Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6…

  • Unscored —
    CVE-2011-4828 Public exploit EPSS 64%

    Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote att…

  • Unscored —
    CVE-2011-4836 Public exploit

    Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to injec…

  • Unscored —
    CVE-2011-4837 Public exploit

    Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote at…

  • Unscored —
    CVE-2011-4826

    SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2011-4830 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Joom…

  • Unscored —
    CVE-2011-4517 EPSS 10%

    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain …

    ghostscript Debian
  • Unscored —
    CVE-2011-4516 EPSS 10%

    Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remo…

    ghostscript Debian
  • Unscored —
    CVE-2011-4822

    Multiple cross-site scripting (XSS) vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow…

  • Unscored —
    CVE-2011-4832 Public exploit

    Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allo…

  • Unscored —
    CVE-2011-4829 Public exploit

    SQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla! allows remote attack…

  • Unscored —
    CVE-2011-4825 Public exploit EPSS 39%

    Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tiny…

  • Unscored —
    CVE-2011-4834 Public exploit

    The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-…

  • Unscored —
    CVE-2011-4824

    SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL c…

    cacti Debian
  • Unscored —
    CVE-2011-4339

    ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RH…

    ipmitool Debian