Skip to content
OpenAdvisories

Archive

December 2011

Vulnerabilities first published in this month (UTC), newest first.

← November 2011 2011 / December January 2012 →
  1. 16
  2. 212
  3. 3 
  4. 4 
  5. 58
  6. 67
  7. 729
  8. 822
  9. 91
  10. 103
  11. 11 
  12. 12 
  13. 1318
  14. 1437
  15. 1522
  16. 1659
  17. 177
  18. 18 
  19. 19 
  20. 204
  21. 217
  22. 227
  23. 2311
  24. 248
  25. 2516
  26. 26 
  27. 2714
  28. 28 
  29. 2917
  30. 3022
  31. 313
All Critical High Medium Low Exploited only Public exploit

340 results · Feed

  • Unscored —
    CVE-2011-1391

    The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational…

  • Unscored —
    CVE-2011-1392

    The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational…

  • Unscored —
    CVE-2011-1388

    The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational…

  • Medium —
    CVE-2011-4596

    OpenStack Nova Multiple directory traversal vulnerabilities

    Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) man…

    nova nova Debian PyPI
  • Unscored —
    CVE-2011-4895

    Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by…

    tor Debian
  • Unscored —
    CVE-2011-4896

    Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently confi…

    tor Debian
  • Unscored —
    CVE-2011-4894

    Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a dire…

    tor Debian
  • Unscored —
    CVE-2011-4897

    Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostnam…

    tor Debian
  • Unscored —
    CVE-2011-2768

    Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR con…

    tor Debian
  • Unscored —
    CVE-2011-2778

    Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory…

    tor Debian
  • Unscored —
    CVE-2011-2769

    Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a c…

    tor Debian
  • Low —
    CVE-2011-4634

    phpMyAdmin vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel; (2) a crafted database name, related…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-4780

    Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.…

    phpmyadmin Debian
  • Low —
    CVE-2011-4782

    phpMyAdmin Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-3990

    Cross-site scripting (XSS) vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allo…

  • Medium —
    CVE-2011-4203

    Moodle CRLF Injection Vulnerability in Calendar Component

    CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via …

    moodle/moodle moodle Ubuntu Packagist
  • Unscored —
    CVE-2011-4453 Public exploit EPSS 52%

    The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2011-4037

    Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote …

  • Unscored —
    CVE-2011-3664

    Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain…

  • Unscored —
    CVE-2011-3660

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through …

  • Unscored —
    CVE-2011-3663

    Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to captur…

  • Unscored —
    CVE-2011-3658 Public exploit EPSS 70%

    The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAt…

  • Unscored —
    CVE-2011-3665

    Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause …

  • Unscored —
    CVE-2011-3666

    Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable fil…

  • Unscored —
    CVE-2011-3661

    YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote …

  • Unscored —
    CVE-2011-4528

    Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zo…

    unbound Debian
  • Medium 5.7
    CVE-2011-4723 Exploited

    The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive info…

    KEV Sep 8, 2022
  • Unscored —
    CVE-2011-4717 Public exploit

    Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary di…

  • Unscored —
    CVE-2011-4869

    validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, whi…

    unbound Debian
  • Unscored —
    CVE-2011-4859

    The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TS…

  • Unscored —
    CVE-2011-4860

    The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 1…

  • Unscored —
    CVE-2011-4861

    The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantu…

  • Unscored —
    CVE-2011-4603

    The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not pe…

    pidgin Debian
  • Unscored —
    CVE-2011-4141

    Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privi…

  • Unscored —
    CVE-2011-4602

    The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat…

    pidgin Debian
  • Unscored —
    CVE-2011-3339

    Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and ear…

  • Unscored —
    CVE-2011-4857

    Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2011-4369

    Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader an…

  • Unscored —
    CVE-2011-3834

    Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2011-4760

    Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for corresp…