Archive
December 2011
Vulnerabilities first published in this month (UTC), newest first.
340 results · Feed
-
Unscored —
Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote atta…
-
Unscored —
Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violation…
-
Unscored —
Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecifie…
-
Unscored —
Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified co…
-
Unscored —
Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe …
-
Unscored —
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote att…
-
Unscored —CVE-2011-4684 Public exploit
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vect…
-
Unscored —
Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations dur…
-
Unscored —
WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data ab…
-
Unscored —
Opera before 11.60 does not properly consider the number of . (dot) characters that conventionally exist in domain name…
-
Unscored —
vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows re…
-
Unscored —
Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a de…
-
Unscored —
Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violatio…
-
Unscored —
Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME…
-
High 8.8
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …
KEV Jun 8, 2022 -
Unscored —CVE-2002-2435 EPSS 14%
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle…
-
Unscored —
The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not …
-
Unscored —
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey be…
-
Unscored —CVE-2010-5071 EPSS 13%
The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of valu…
-
Unscored —
The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object return…
-
Unscored —
The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which…
-
Unscored —
The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object re…
-
Unscored —
The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object r…
-
Unscored —
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, …
-
Unscored —
The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different co…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arb…
-
Unscored —CVE-2011-4130 EPSS 13%
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute …
-
Unscored —
Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to a…
-
Unscored —
One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easie…
-
Unscored —
The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts …
-
Unscored —
One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticat…
-
Unscored —
One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) …
-
Unscored —
Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers …
-
Unscored —
Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio…
-
Unscored —CVE-2011-4162 Public exploit
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless m…
-
Unscored —
The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (…
-
Medium —
Celery local privilege escalation vulnerability
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gai…
-
Unscored —
Multiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to include and execute arbitrar…