Skip to content
OpenAdvisories

Archive

30 December 2011

Vulnerabilities first published on this day (UTC), newest first.

← November 2011 2011 / December /30 January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Unscored —
    CVE-2011-5043 Public exploit

    TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long stri…

  • Unscored —
    CVE-2011-5045 Public exploit

    Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inj…

  • Unscored —
    CVE-2011-5040 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-5044 Public exploit

    SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute…

  • Unscored —
    CVE-2011-5039 Public exploit

    Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2011-5041 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2011-5046 Public exploit EPSS 45%

    The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo…

  • Unscored —
    CVE-2011-4885 Public exploit EPSS 83%

    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pr…

  • High —
    CVE-2011-5034 Public exploit EPSS 81%

    Apache Geronimo Hash Collisions Cause DoS

    Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.…

    org.apache.geronimo:geronimo Maven
  • Unscored —
    CVE-2011-5035 Public exploit EPSS 68%

    Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 …