Skip to content
OpenAdvisories

Archive

30 December 2011

Vulnerabilities first published on this day (UTC), newest first.

← November 2011 2011 / December /30 January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2011-5043 Public exploit

    TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long stri…

  • Unscored —
    CVE-2011-5038

    SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2011-5045 Public exploit

    Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inj…

  • Unscored —
    CVE-2011-5040 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-5044 Public exploit

    SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute…

  • Unscored —
    CVE-2011-5042

    Cross-site scripting (XSS) vulnerability in inc/lib/lib.base.php in SASHA 0.2.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2011-5039 Public exploit

    Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2011-5041 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2011-5046 Public exploit EPSS 45%

    The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo…

  • Medium 5.3
    CVE-2011-4461

    Improper Input Validation in Jetty

    Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

    org.eclipse.jetty:jetty-server Maven
  • High 7.5
    CVE-2011-4462

    Plone Denial of Service vulnerability

    Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

    plone PyPI
  • Unscored —
    CVE-2011-4815

    Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions pred…

  • Unscored —
    CVE-2011-4885 Public exploit EPSS 83%

    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pr…

  • Unscored —
    CVE-2011-4838

    JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which…

    jruby Debian
  • Unscored —
    CVE-2011-3416 EPSS 44%

    The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1,…

  • Unscored —
    CVE-2011-3414 EPSS 58%

    The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Micros…

  • Unscored —
    CVE-2011-3417 EPSS 34%

    The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1,…

  • Unscored —
    CVE-2011-3415 EPSS 23%

    Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.…

  • Unscored —
    CVE-2011-5037

    Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictab…

  • Medium —
    CVE-2011-5036

    Rack Gem Subject to Denial of Service via Hash Collisions

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by send…

    rack ruby-rack org.jruby:jruby-parent Debian Maven RubyGems
  • High —
    CVE-2011-5034 Public exploit EPSS 81%

    Apache Geronimo Hash Collisions Cause DoS

    Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.…

    org.apache.geronimo:geronimo Maven
  • Unscored —
    CVE-2011-5035 Public exploit EPSS 68%

    Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 …