Skip to content
OpenAdvisories

Archive

December 2011

Vulnerabilities first published in this month (UTC), newest first.

← November 2011 2011 / December January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.2
    CVE-2011-4617

    Virtualenv Allows Symlink Attack on /tmp/

    virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.

    virtualenv python-virtualenv Debian PyPI
  • Medium 5.3
    CVE-2011-4461

    Improper Input Validation in Jetty

    Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

    org.eclipse.jetty:jetty-server Maven
  • Medium —
    CVE-2011-5036

    Rack Gem Subject to Denial of Service via Hash Collisions

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by send…

    rack ruby-rack org.jruby:jruby-parent Debian Maven RubyGems
  • Medium —
    CVE-2011-4596

    OpenStack Nova Multiple directory traversal vulnerabilities

    Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) man…

    nova nova Debian PyPI
  • Medium —
    CVE-2011-4203

    Moodle CRLF Injection Vulnerability in Calendar Component

    CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via …

    moodle/moodle moodle Ubuntu Packagist
  • Medium 5.7
    CVE-2011-4723 Exploited

    The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive info…

    KEV Sep 8, 2022
  • Medium 4.6
    CVE-2011-4346

    Satellite: xss in custom system information key handling

    Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

    Red Hat Red Hat Satellite 6 Red Hat Network Satellite Server v 5.4
  • Medium —
    CVE-2011-4356

    Celery local privilege escalation vulnerability

    Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gai…

    celery celery Debian PyPI