Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
December

CVEs published in December 2011

352 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

google chromeGoogle Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote...CVE-2011-39105.0 MediumDecember 13, 2011
google chrome, apple iphone os, itunes +1 more +3 moreThe Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit...CVE-2011-39095.0 MediumDecember 13, 2011
google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote...CVE-2011-39085.0 MediumDecember 13, 2011
google chromeThe view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the...CVE-2011-39074.3 MediumDecember 13, 2011
google chromeThe PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of...CVE-2011-39065.0 MediumDecember 13, 2011
google chrome, debian linux, redhat enterprise linux desktop +3 more +5 morelibxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial...CVE-2011-3905Fix available5.0 MediumDecember 13, 2011
google chromeUse-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause...CVE-2011-39047.5 HighDecember 13, 2011
google chromeGoogle Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote...CVE-2011-39035.0 MediumDecember 13, 2011
ffftpUntrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges...CVE-2011-42669.3 HighDecember 13, 2011
restorepointThe Tadasoft Restorepoint 3.2 evaluation image uses weak permissions (www write access) for...CVE-2011-42027.2 HighDecember 13, 2011
restorepointremote_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to...CVE-2011-42019.3 HighDecember 13, 2011
freedesktop colordMultiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord...CVE-2011-4349Fix available4.6 MediumDecember 10, 2011
redhat satellite, red hat network satellite server v 5.4, satellite 6 +2 moreSatellite: xss in custom system information key handlingCVE-2011-4346Fix available4.6 MediumDecember 10, 2011
tedfelix acpid2event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during...CVE-2011-4578Fix available4.6 MediumDecember 10, 2011
google cr-48 chromebook, acer ac700 chromebook, google chrome os +1 more +3 moreMultiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on the Acer AC700,...CVE-2011-471910.0 HighDecember 9, 2011
f5 nginx, fedoraproject fedora, suse studio +2 more +4 moreHeap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx...CVE-2011-4315Fix available6.8 MediumDecember 8, 2011
gnu gnutlsBuffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x...CVE-2011-41284.3 MediumDecember 8, 2011
mit kerberosThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...CVE-2011-1530Fix available6.8 MediumDecember 8, 2011
blackberry tablet osThe BlackBerry PlayBook service on the Research In Motion (RIM) BlackBerry PlayBook tablet with...CVE-2011-02917.2 HighDecember 8, 2011
dream-multimedia-tv dreambox dm800 hd pvr, dreambox dm800 hd pvr firmware, dreambox dm800 hd se +1 more +3 moreDirectory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows...CVE-2011-4716Public exploit5.0 MediumDecember 8, 2011
koha, koha liblime koha +1 moreDirectory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6...CVE-2011-4715Public exploit5.0 MediumDecember 8, 2011
vvertex musterDirectory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to...CVE-2011-4714Public exploit5.0 MediumDecember 8, 2011
oscssDirectory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows...CVE-2011-4713Public exploit5.0 MediumDecember 8, 2011
monoxide0184 oxide webserverDirectory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary...CVE-2011-4712Public exploit5.0 MediumDecember 8, 2011
namazuMultiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote...CVE-2011-47115.0 MediumDecember 8, 2011
getpixie pixieMultiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to...CVE-2011-4710Public exploit7.5 HighDecember 8, 2011
hotaru cms, search plugin +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for...CVE-2011-4709Public exploit4.3 MediumDecember 8, 2011
ibm rational asset managerCross-site scripting (XSS) vulnerability in IBM Rational Asset Manager before 7.5.1 allows remote...CVE-2011-47084.3 MediumDecember 8, 2011
sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver...CVE-2011-47074.3 MediumDecember 8, 2011
mambo-foundation mamboSQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows...CVE-2011-2917Public exploit7.5 HighDecember 8, 2011
isc dhcp, canonical ubuntu linux, debian linux +2 moredhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle...CVE-2011-4539Fix availableEPSS 15.2%5.0 MediumDecember 8, 2011
phpwebsiteCross-site scripting (XSS) vulnerability in phpWebSite before 1.0.0 allows remote attackers to...CVE-2011-42654.3 MediumDecember 8, 2011
etomiteCross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject...CVE-2011-42644.3 MediumDecember 8, 2011
ca siteminderCross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12...CVE-2011-40544.3 MediumDecember 8, 2011
redhat freeipaCross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1...CVE-2011-3636Fix available6.8 MediumDecember 8, 2011
novell groupwise messenger, messenger +1 moreThe server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger...CVE-2011-31795.0 MediumDecember 8, 2011
novell zenworks asset managementDirectory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management ...CVE-2011-2653Public exploitEPSS 71.3%10.0 HighDecember 8, 2011
microsoft windows 7Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users...CVE-2011-46956.9 MediumDecember 7, 2011
adobe flash playerUnspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote...CVE-2011-46949.3 HighDecember 7, 2011
adobe flash playerUnspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote...CVE-2011-46939.3 HighDecember 7, 2011
apple safari, webkit, google chrome +2 moreWebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not...CVE-2011-46925.0 MediumDecember 7, 2011
google chromeGoogle Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same...CVE-2011-46915.0 MediumDecember 7, 2011
opera browserOpera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy...CVE-2011-46905.0 MediumDecember 7, 2011
microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same...CVE-2011-46895.0 MediumDecember 7, 2011
mozilla firefoxMozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin...CVE-2011-46885.0 MediumDecember 7, 2011
opera browserOpera before 11.60 allows remote attackers to cause a denial of service (CPU and memory...CVE-2011-46875.0 MediumDecember 7, 2011
opera browserUnspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote...CVE-2011-46865.0 MediumDecember 7, 2011
opera browserDragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application...CVE-2011-46855.0 MediumDecember 7, 2011
opera browserOpera before 11.60 does not properly handle certificate revocation, which has unspecified impact...CVE-2011-4684Public exploit10.0 HighDecember 7, 2011
opera browserUnspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to...CVE-2011-468310.0 HighDecember 7, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open