Skip to content
OpenAdvisories

Archive

30 December 2011

Vulnerabilities first published on this day (UTC), newest first.

← November 2011 2011 / December /30 January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2011-4461

    Improper Input Validation in Jetty

    Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

    org.eclipse.jetty:jetty-server Maven
  • Medium —
    CVE-2011-5036

    Rack Gem Subject to Denial of Service via Hash Collisions

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by send…

    rack ruby-rack org.jruby:jruby-parent Debian Maven RubyGems