Skip to content
OpenAdvisories

Archive

December 2011

Vulnerabilities first published in this month (UTC), newest first.

← November 2011 2011 / December January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Unscored —
    CVE-2011-4620 Public exploit EPSS 13%

    Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products…

    plib Debian
  • Unscored —
    CVE-2011-5043 Public exploit

    TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long stri…

  • Unscored —
    CVE-2011-5045 Public exploit

    Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inj…

  • Unscored —
    CVE-2011-5040 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-5044 Public exploit

    SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute…

  • Unscored —
    CVE-2011-5039 Public exploit

    Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2011-5041 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2011-5046 Public exploit EPSS 45%

    The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo…

  • Unscored —
    CVE-2011-4885 Public exploit EPSS 83%

    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pr…

  • High —
    CVE-2011-5034 Public exploit EPSS 81%

    Apache Geronimo Hash Collisions Cause DoS

    Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.…

    org.apache.geronimo:geronimo Maven
  • Unscored —
    CVE-2011-5035 Public exploit EPSS 68%

    Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 …

  • Unscored —
    CVE-2011-5033 Public exploit

    Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdm…

  • Unscored —
    CVE-2011-5031 Public exploit

    Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attacker…

  • Unscored —
    CVE-2011-5028 Public exploit

    Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earli…

  • Unscored —
    CVE-2011-5023 Public exploit

    Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2011-5022 Public exploit

    SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2011-5025 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inje…

    yaws Debian
  • Unscored —
    CVE-2011-5026 Public exploit

    Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d …

  • Unscored —
    CVE-2007-6750 Public exploit EPSS 71%

    The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTT…

    apache2 Debian
  • Unscored —
    CVE-2011-4166 Public exploit EPSS 58%

    Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administratio…

  • Unscored —
    CVE-2011-4050 Public exploit EPSS 20%

    Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to…

  • Unscored —
    CVE-2011-4862 Public exploit EPSS 95%

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka …

    krb5 heimdal inetutils Debian
  • Unscored —
    CVE-2011-5001 Public exploit EPSS 64%

    Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProces…

  • Unscored —
    CVE-2011-5010 Public exploit EPSS 66%

    apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via s…

  • Unscored —
    CVE-2011-5009 Public exploit EPSS 10%

    The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a den…

  • Unscored —
    CVE-2011-5003 Public exploit EPSS 62%

    Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier …

  • Unscored —
    CVE-2011-5005 Public exploit

    Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2011-5002 Public exploit

    Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2011-5006 Public exploit

    Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize …

  • Unscored —
    CVE-2011-5012 Public exploit

    Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in…

  • Unscored —
    CVE-2011-5007 Public exploit EPSS 73%

    Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB…

  • Unscored —
    CVE-2010-5081 Public exploit EPSS 31%

    Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2009-5109 Public exploit EPSS 32%

    Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long …

  • Unscored —
    CVE-2011-4362 Public exploit EPSS 21%

    Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lightt…

    lighttpd Debian
  • Unscored —
    CVE-2011-4453 Public exploit EPSS 52%

    The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2011-3658 Public exploit EPSS 70%

    The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAt…

  • Unscored —
    CVE-2011-4717 Public exploit

    Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary di…

  • Unscored —
    CVE-2011-4835 Public exploit

    Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbit…

  • Unscored —
    CVE-2011-4831 Public exploit

    Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to…

  • Unscored —
    CVE-2011-4823 Public exploit

    Multiple SQL injection vulnerabilities in Vik Real Estate (com_vikrealestate) component 1.0 for Joomla! allow remote at…