CVEs published in December 2011
352 vulnerabilities, 77 critical, 2 exploited.
- digium asteriskThe handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1...4.3 Medium
- digium asteriskThe SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2...5.0 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +6 more +8 moreThe jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data...6.8 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +5 more +7 moreHeap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in...6.8 Medium
- ipmitool project ipmitoolipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red...3.6 Low
- linux kernelThe __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to...5.5 Medium
- adobe coldfusionCross-site scripting (XSS) vulnerability in Remote Development Services (RDS) in Adobe ColdFusion...4.3 Medium
- emc rsa adaptive authentication on-premiseEMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2...6.8 Medium
- emc rsa adaptive authentication on-premiseEMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2...6.8 Medium
- adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote...4.3 Medium
- dolibarr erp\/crmMultiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier...4.3 Medium
- whmcs whmcompletesolutionDirectory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows...5.0 Medium
- bst bestshopproCross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to...4.3 Medium
- bst bestshopproSQL injection vulnerability in pokaz_podkat.php in BestShopPro allows remote attackers to execute...7.5 High
- whmcs whmcompletesolutionMultiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow...5.0 Medium
- joomlaextensions com hmcommunityMultiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity)...4.3 Medium
- joomlaextensions com hmcommunitySQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for...7.5 High
- phpalbumDirectory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote...5.0 Medium
- phpalbumMultiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier...4.3 Medium
- sap crystal reports serverCross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008...4.3 Medium
- foobla com obsuggestDirectory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for...5.0 Medium
- bravenewcode wptouchSQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote...7.5 High
- dolibarr erp\/crmMultiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote...6.5 Medium
- authenex strong authentication system serverSQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in...7.5 High
- solarwinds serv-u file serverDirectory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote...9.0 High
- microsoft office, office compatibility pack, powerpoint +1 more +3 moreMicrosoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel,...9.3 High
- microsoft publisherMicrosoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary...9.3 High
- microsoft publisherMicrosoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted...9.3 High
- microsoft publisherArray index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreCsrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreBuffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active...9.0 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header...4.3 Medium
- microsoft excel, office +1 moreMicrosoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which...9.3 High
- microsoft windows 7, windows vista, windows xp +2 moreENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows...9.3 High
- microsoft windows xp, windows server 2003 +1 moreMicrosoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory...9.3 High
- microsoft windows xp, windows server 2003 +1 moreThe Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003...9.3 High
- microsoft powerpointUntrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users...9.3 High
- microsoft internet explorerUntrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +1 more +3 moreThe kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2,...7.2 High
- microsoft pinyin ime, pinyin new experience style, pinyin simple fast style +2 moreThe Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME...7.2 High
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a...4.3 Medium
- microsoft officeUse-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and...9.3 High
- microsoft publisherMicrosoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations...9.3 High
- google chromeStack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote...7.5 High
- google chromeGoogle Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows...5.0 Medium
- google chromeBuffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of...7.5 High
- google chromeThe internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before...7.5 High
- google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause...7.5 High
- google chromeGoogle Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote...5.0 Medium
- Show moreLoading…