Skip to content
OpenAdvisories

Archive

December 2011

Vulnerabilities first published in this month (UTC), newest first.

← November 2011 2011 / December January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

340 results · Feed

  • Unscored —
    CVE-2011-5026 Public exploit

    Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d …

  • Unscored —
    CVE-2011-5021

    PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote…

  • Unscored —
    CVE-2009-5111

    GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as de…

  • Unscored —
    CVE-2009-5110

    dhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated …

  • Unscored —
    CVE-2007-6750 Public exploit EPSS 71%

    The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTT…

    apache2 Debian
  • Unscored —
    CVE-2011-1393

    Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 al…

  • Unscored —
    CVE-2011-4783

    The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a cr…

  • Unscored —
    CVE-2011-3841

    Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08…

  • Unscored —
    CVE-2011-4166 Public exploit EPSS 58%

    Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administratio…

  • Unscored —
    CVE-2011-4050 Public exploit EPSS 20%

    Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to…

  • Unscored —
    CVE-2011-4536

    Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in WellinTech KingView 6.53 and…

  • Unscored —
    CVE-2011-4784

    The NVIDIA Stereoscopic 3D driver before 7.17.12.7565 does not properly handle commands sent to a named pipe, which all…

  • Unscored —
    CVE-2011-4537

    Multiple buffer overflows in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11355 and earlier allo…

  • Unscored —
    CVE-2011-4168

    Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 a…

  • Unscored —
    CVE-2011-4169

    Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitiv…

  • Unscored —
    CVE-2011-4167

    Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attacke…

  • Unscored —
    CVE-2011-4862 Public exploit EPSS 95%

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka …

    krb5 heimdal inetutils Debian
  • Unscored —
    CVE-2011-4601

    family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 …

    pidgin Debian
  • Unscored —
    CVE-2011-5001 Public exploit EPSS 64%

    Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProces…

  • Unscored —
    CVE-2011-5004

    Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Jo…

  • Unscored —
    CVE-2011-5010 Public exploit EPSS 66%

    apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via s…

  • Unscored —
    CVE-2011-5009 Public exploit EPSS 10%

    The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a den…

  • Unscored —
    CVE-2011-5003 Public exploit EPSS 62%

    Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier …

  • Unscored —
    CVE-2011-5005 Public exploit

    Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2011-5002 Public exploit

    Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2011-5008

    Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2011-5006 Public exploit

    Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize …

  • Unscored —
    CVE-2011-5012 Public exploit

    Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in…

  • Unscored —
    CVE-2011-5011

    Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote…

  • Unscored —
    CVE-2011-5007 Public exploit EPSS 73%

    Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB…

  • Unscored —
    CVE-2010-5081 Public exploit EPSS 31%

    Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2009-5109 Public exploit EPSS 32%

    Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long …

  • Unscored —
    CVE-2011-4362 Public exploit EPSS 21%

    Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lightt…

    lighttpd Debian
  • Unscored —
    CVE-2011-3835

    Multiple cross-site scripting (XSS) vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2011-3839

    The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hb…

  • Unscored —
    CVE-2011-3838

    Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2011-3837

    Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2011-3836

    Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentica…

  • Unscored —
    CVE-2011-3372

    imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentic…

  • Unscored —
    CVE-2011-3378

    RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corrupti…

    rpm Debian