Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
December

CVEs published in December 2011

352 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie...CVE-2011-47565.0 MediumDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is...CVE-2011-475510.0 HighDecember 16, 2011
parallels plesk small business panelMultiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2...CVE-2011-47544.3 MediumDecember 16, 2011
parallels plesk small business panelMultiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow...CVE-2011-47537.5 HighDecember 16, 2011
smartertools smarterstatsSmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources,...CVE-2011-475210.0 HighDecember 16, 2011
smartertools smarterstatsSmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to...CVE-2011-47515.0 MediumDecember 16, 2011
smartertools smarterstatsMultiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow...CVE-2011-47504.3 MediumDecember 16, 2011
parallels plesk panelThe billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 generates a password form...CVE-2011-474910.0 HighDecember 16, 2011
parallels plesk panelThe billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e...CVE-2011-47485.0 MediumDecember 16, 2011
parallels plesk panelThe billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not prevent the use...CVE-2011-47475.0 MediumDecember 16, 2011
parallels plesk panelThe billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2...CVE-2011-47465.0 MediumDecember 16, 2011
parallels plesk panelMultiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk...CVE-2011-47454.3 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type...CVE-2011-474410.0 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header...CVE-2011-474310.0 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e...CVE-2011-47425.0 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database...CVE-2011-47415.0 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages...CVE-2011-47404.3 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form...CVE-2011-473910.0 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly...CVE-2011-47385.0 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password...CVE-2011-47375.0 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password...CVE-2011-47365.0 MediumDecember 16, 2011
parallels plesk panelMultiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel...CVE-2011-47354.3 MediumDecember 16, 2011
parallels plesk panelMultiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build...CVE-2011-47347.5 HighDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends...CVE-2011-473310.0 HighDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 omits the...CVE-2011-473210.0 HighDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an...CVE-2011-47315.0 MediumDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 generates a...CVE-2011-473010.0 HighDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not...CVE-2011-47295.0 MediumDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set...CVE-2011-47285.0 MediumDecember 16, 2011
parallels plesk panelThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not...CVE-2011-472710.0 HighDecember 16, 2011
parallels plesk panelMultiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in...CVE-2011-47264.3 MediumDecember 16, 2011
parallels plesk panelMultiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk...CVE-2011-47257.5 HighDecember 16, 2011
torMultiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a...CVE-2011-2778Fix available7.6 HighDecember 16, 2011
homeseer hs2Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5...CVE-2011-4837Public exploit6.8 MediumDecember 15, 2011
homeseer hs2Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows...CVE-2011-4836Public exploit4.3 MediumDecember 15, 2011
homeseer hs2Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote...CVE-2011-4835Public exploit7.5 HighDecember 15, 2011
hp application lifestyle managementThe GetInstalledPackages function in the configuration tool in HP Application Lifestyle...CVE-2011-4834Public exploit4.6 MediumDecember 15, 2011
sugarcrmMultiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2...CVE-2011-4833Public exploit7.5 HighDecember 15, 2011
caupo cauposhop classic, cauposhop pro +1 moreDirectory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro...CVE-2011-4832Public exploit7.5 HighDecember 15, 2011
david azoulay web file browserDirectory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote...CVE-2011-4831Public exploit4.0 MediumDecember 15, 2011
barter-sites com listingMultiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites...CVE-2011-4830Public exploit3.5 LowDecember 15, 2011
barter-sites com listingSQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla...CVE-2011-4829Public exploit7.5 HighDecember 15, 2011
autosectools v-cmsUnrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS...CVE-2011-4828Public exploitEPSS 64.3%7.5 HighDecember 15, 2011
autosectools v-cmsMultiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote...CVE-2011-48274.3 MediumDecember 15, 2011
autosectools v-cmsSQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to...CVE-2011-48266.8 MediumDecember 15, 2011
phpletter ajax file and image manager, phpmyfaq, tinymce +2 moreStatic code injection vulnerability in inc/function.base.php in Ajax File and Image Manager...CVE-2011-4825Public exploitEPSS 39.2%7.5 HighDecember 15, 2011
cactiSQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to...CVE-2011-4824Fix available7.5 HighDecember 15, 2011
extensionsforjoomla com vikrealestateMultiple SQL injection vulnerabilities in Vik Real Estate (com_vikrealestate) component 1.0 for...CVE-2011-4823Public exploit7.5 HighDecember 15, 2011
atlassian fisheyeMultiple cross-site scripting (XSS) vulnerabilities in the user profile feature in Atlassian...CVE-2011-48224.3 MediumDecember 15, 2011
artsoft rocks\'n\'diamondsArtsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to...CVE-2011-4606Fix available3.6 LowDecember 15, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open