Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
December

CVEs published in December 2011

352 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

opera browserThe JavaScript engine in Opera before 11.60 does not properly implement the in operator, which...CVE-2011-46826.4 MediumDecember 7, 2011
opera browserOpera before 11.60 does not properly consider the number of . (dot) characters that...CVE-2011-46815.0 MediumDecember 7, 2011
vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5...CVE-2011-46804.3 MediumDecember 7, 2011
vtiger crmvtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads...CVE-2011-46794.0 MediumDecember 7, 2011
apc powerchuteCross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before...CVE-2011-42634.3 MediumDecember 7, 2011
adobe acrobat, reader and acrobat, acrobat reader +2 moreUnspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on...CVE-2011-2462In KEVPublic exploitEPSS 88.6%9.8 CriticalDecember 7, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1...CVE-2010-50744.3 MediumDecember 7, 2011
google chromeThe JavaScript implementation in Google Chrome 4 does not properly restrict the set of values...CVE-2010-50735.0 MediumDecember 7, 2011
opera browserThe JavaScript implementation in Opera 10.5 does not properly restrict the set of values...CVE-2010-50725.0 MediumDecember 7, 2011
microsoft ie, internet explorer +1 moreThe JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly...CVE-2010-5071EPSS 12.7%5.0 MediumDecember 7, 2011
apple safariThe JavaScript implementation in Apple Safari 4 does not properly restrict the set of values...CVE-2010-50705.0 MediumDecember 7, 2011
google chromeThe Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the ...CVE-2010-50694.3 MediumDecember 7, 2011
opera browserThe Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the ...CVE-2010-50684.3 MediumDecember 7, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and...CVE-2002-24375.0 MediumDecember 7, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before...CVE-2002-24364.3 MediumDecember 7, 2011
microsoft ie, internet explorer +1 moreThe Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier...CVE-2002-2435EPSS 13.7%4.3 MediumDecember 7, 2011
oneclickorgs one click orgsThe password reset feature in One Click Orgs before 1.2.3 generates different error messages for...CVE-2011-46785.0 MediumDecember 6, 2011
oneclickorgs one click orgsOne Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields...CVE-2011-46777.5 HighDecember 6, 2011
oneclickorgs one click orgsOne Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which...CVE-2011-45554.0 MediumDecember 6, 2011
oneclickorgs one click orgsOne Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via...CVE-2011-45545.5 MediumDecember 6, 2011
oneclickorgs one click orgsMultiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers...CVE-2011-45535.8 MediumDecember 6, 2011
oneclickorgs one click orgsMultiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote...CVE-2011-45524.3 MediumDecember 6, 2011
oracle sun glassfish enterprise serverUnspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote...CVE-2011-4358Fix available6.4 MediumDecember 6, 2011
widelandsThe pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15...CVE-2011-4675Fix available6.4 MediumDecember 5, 2011
oscommerceMultiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to...CVE-2011-45437.5 HighDecember 5, 2011
celeryproject celeryCelery local privilege escalation vulnerabilityCVE-2011-4356Fix available6.9 MediumDecember 5, 2011
hp protecttools device access managerThe (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6)...CVE-2011-4162Public exploit7.5 HighDecember 5, 2011
indusoft web studioStack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module...CVE-2011-40529.3 HighDecember 5, 2011
indusoft web studioCEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and...CVE-2011-4051Public exploitEPSS 67.8%10.0 HighDecember 5, 2011
ironmountain connected backupThe Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute...CVE-2011-239710.0 HighDecember 5, 2011
widelandsDirectory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might...CVE-2011-1932Fix available6.4 MediumDecember 5, 2011
gnome evince, t1lib, tetex +2 moreMultiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib...CVE-2011-5244Fix available6.8 MediumDecember 3, 2011
zabbixSQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions...CVE-2011-4674Public exploitFix available7.5 HighDecember 2, 2011
automattic jetpackSQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows...CVE-2011-4673Public exploit7.5 HighDecember 2, 2011
valid tiny-erpMultiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers...CVE-2011-4672Public exploit7.5 HighDecember 2, 2011
adrotateplugin adrotateSQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other...CVE-2011-4671Public exploit7.5 HighDecember 2, 2011
vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote...CVE-2011-4670Public exploit4.3 MediumDecember 2, 2011
wordpress wordpress-usersSQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier...CVE-2011-46697.5 HighDecember 2, 2011
ibm tivoli netcool\/reporterIBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code...CVE-2011-46687.5 HighDecember 2, 2011
prestashopCRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote...CVE-2011-4545Public exploit5.0 MediumDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreDirectory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier,...CVE-2011-40365.0 MediumDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreCross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier,...CVE-2011-40354.3 MediumDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreBuffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo...CVE-2011-4034Public exploitEPSS 13.4%9.3 HighDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreBuffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo...CVE-2011-40334.3 MediumDecember 2, 2011
linux kernelThe hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of...CVE-2011-22032.1 LowDecember 2, 2011
linux kernelThe tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow...CVE-2011-11622.1 LowDecember 2, 2011
prestashopMultiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote...CVE-2011-4544Public exploit4.3 MediumDecember 1, 2011
atmail openMultiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source...CVE-2011-4540Public exploit4.3 MediumDecember 1, 2011
hp digital sender 9200c, laserjet enterprise 500 color, color laserjet 3000 +38 more +40 moreThe default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx,...CVE-2011-4161EPSS 14.1%10.0 HighDecember 1, 2011
jenkinsJenkins allows Cross-Site Scripting (XSS)CVE-2011-4344Fix available2.6 LowDecember 1, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open