Archive
December 2011
Vulnerabilities first published in this month (UTC), newest first.
340 results · Feed
-
Unscored —
Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service o…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service o…
-
Unscored —
The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not proper…
-
Unscored —
Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denia…
-
Unscored —
Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a den…
-
Unscored —
Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a de…
-
Unscored —
Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause …
-
Unscored —
The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows rem…
-
Unscored —
remote_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary comma…
-
Unscored —
The Tadasoft Restorepoint 3.2 evaluation image uses weak permissions (www write access) for unspecified scripts, which …
-
Unscored —
Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse exec…
-
Unscored —
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow loca…
-
Medium 4.6
Satellite: xss in custom system information key handling
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
-
Unscored —
Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for …
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on the Acer AC700, Samsung Series 5, and Cr-48…
-
Unscored —
The BlackBerry PlayBook service on the Research In Motion (RIM) BlackBerry PlayBook tablet with software before 1.0.8.6…
-
Unscored —
The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 thro…
-
Unscored —
Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remot…
-
Unscored —
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x…
-
Unscored —CVE-2011-4712 Public exploit
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot…
-
Unscored —CVE-2011-4716 Public exploit
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Rational Asset Manager before 7.5.1 allows remote attackers to inject a…
-
Unscored —CVE-2011-4714 Public exploit
Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files …
-
Unscored —CVE-2011-4709 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote …
-
Unscored —CVE-2011-4715 Public exploit
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLim…
-
Unscored —CVE-2011-4710 Public exploit
Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2011-4713 Public exploit
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read ar…
-
Unscored —
Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers…
-
Unscored —CVE-2011-2917 Public exploit
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpWebSite before 1.0.0 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2011-4539 EPSS 15%
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhc…
-
Unscored —
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, all…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attac…
-
Unscored —
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote a…
-
Unscored —
Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute …
-
Unscored —
Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Exp…