Skip to content
OpenAdvisories

Archive

6 January 2012

Vulnerabilities first published on this day (UTC), newest first.

← December 2011 2012 / January /6 February 2012 →
  1. 1 
  2. 24
  3. 37
  4. 410
  5. 53
  6. 611
  7. 73
  8. 818
  9. 9 
  10. 1014
  11. 11 
  12. 123
  13. 1314
  14. 147
  15. 157
  16. 16 
  17. 172
  18. 1880
  19. 1916
  20. 2014
  21. 21 
  22. 22 
  23. 231
  24. 2423
  25. 2523
  26. 264
  27. 2720
  28. 285
  29. 2920
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2011-5054

    kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows l…

  • Unscored —
    CVE-2011-5053 Public exploit

    The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properl…

  • Unscored —
    CVE-2011-4616

    Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers…

    libhtml-template-pro-perl Debian
  • Unscored —
    CVE-2012-0287

    Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explore…

    wordpress Debian
  • Unscored —
    CVE-2011-4619 EPSS 18%

    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly han…

    openssl Debian
  • Unscored —
    CVE-2011-4108 EPSS 16%

    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is …

    openssl Debian
  • Unscored —
    CVE-2011-4577

    OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denia…

    openssl Debian
  • Unscored —
    CVE-2011-4576 EPSS 16%

    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures …

    openssl Debian
  • Unscored —
    CVE-2011-4109 EPSS 17%

    Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attac…

    openssl Debian
  • Unscored —
    CVE-2012-0027

    The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which a…

    openssl Debian
  • Unscored —
    CVE-2012-0390

    The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific r…

    gnutls28 Debian