Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
December

CVEs published in December 2011

352 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +2 moreYARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey...CVE-2011-36617.5 HighDecember 21, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0,...CVE-2011-366010.0 HighDecember 21, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not...CVE-2011-3658Public exploitEPSS 70.3%7.5 HighDecember 21, 2011
unboundvalidator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for...CVE-2011-4869Fix available7.8 HighDecember 20, 2011
d-link dir-300 router, dlink dir-300 firmware +1 moreThe D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to...CVE-2011-4723In KEV6.8 MediumDecember 20, 2011
zftpserver suiteDirectory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users...CVE-2011-4717Public exploit5.5 MediumDecember 20, 2011
unboundUnbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME...CVE-2011-4528Fix available5.0 MediumDecember 20, 2011
lighttpd, debian linux +1 moreInteger signedness error in the base64_decode function in the HTTP authentication functionality ...CVE-2011-4362Public exploitFix availableEPSS 21.1%5.0 MediumDecember 20, 2011
canonical ubuntu linux, debian linux, x.org x server +2 moreThe X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly...CVE-2011-4613Public exploitFix available4.6 MediumDecember 18, 2011
mediawiki, debian linux +1 moreMediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests,...CVE-2011-4361Fix available5.0 MediumDecember 18, 2011
mediawiki, debian linux +1 moreMediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages...CVE-2011-4360Fix available5.0 MediumDecember 18, 2011
gplhost domain technologie controlMultiple cross-site scripting (XSS) vulnerabilities in Domain Technologie Control (DTC) before 0...CVE-2011-31993.5 LowDecember 18, 2011
gplhost domain technologie controlDomain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line...CVE-2011-31982.1 LowDecember 18, 2011
gplhost domain technologie controlSQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote...CVE-2011-31976.5 MediumDecember 18, 2011
gplhost domain technologie controlThe setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable...CVE-2011-31962.1 LowDecember 18, 2011
gplhost domain technologie controlshared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote...CVE-2011-31956.5 MediumDecember 18, 2011
schneider-electric quantum ethernet module 140noe77100, quantum ethernet module 140noe77101, quantum ethernet module 140noe77111 +2 moreThe modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771...CVE-2011-486110.0 HighDecember 17, 2011
schneider-electric quantum ethernet module 140noe77100, quantum ethernet module 140noe77101, quantum ethernet module 140noe77111 +2 moreThe ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771...CVE-2011-486010.0 HighDecember 17, 2011
schneider-electric m340 ethernet module bmxnoe0100, m340 ethernet module bmxnoe0110, m340 ethernet module bmxp342020 +18 more +20 moreThe Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65*...CVE-2011-485910.0 HighDecember 17, 2011
pidginThe silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin...CVE-2011-4603Fix available5.0 MediumDecember 17, 2011
pidginThe XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing...CVE-2011-4602Fix available5.0 MediumDecember 17, 2011
rsa securidUntrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows...CVE-2011-41419.3 HighDecember 17, 2011
7t igss, safenet-inc sentinel hasp run-time, sentinel hasp sdk +2 moreCross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time...CVE-2011-33394.3 MediumDecember 17, 2011
nullsoft winampHeap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote...CVE-2011-485710.0 HighDecember 16, 2011
adobe acrobat, acrobat reader +1 moreUnspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on...CVE-2011-436910.0 HighDecember 16, 2011
nullsoft winampMultiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers...CVE-2011-38349.3 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type...CVE-2011-48569.3 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header...CVE-2011-48559.3 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content...CVE-2011-48549.3 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes an RFC 1918 IP...CVE-2011-48534.3 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates web pages containing...CVE-2011-48524.3 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates a password form...CVE-2011-48519.3 HighDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not include the HTTPOnly...CVE-2011-48504.3 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag...CVE-2011-48494.3 MediumDecember 16, 2011
parallels plesk panelThe Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes a submitted password...CVE-2011-48484.3 MediumDecember 16, 2011
parallels plesk panelSQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18...CVE-2011-48477.5 HighDecember 16, 2011
parallels plesk panelCross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in...CVE-2011-47774.3 MediumDecember 16, 2011
parallels plesk panelMultiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel...CVE-2011-47764.3 MediumDecember 16, 2011
parallels plesk small business panelThe Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits...CVE-2011-476810.0 HighDecember 16, 2011
parallels plesk small business panelThe Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web...CVE-2011-47675.0 MediumDecember 16, 2011
parallels plesk small business panel** DISPUTED ** The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel...CVE-2011-4766Disputed5.0 MediumDecember 16, 2011
parallels plesk small business panelThe Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not...CVE-2011-47654.3 MediumDecember 16, 2011
parallels plesk small business panelMultiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature...CVE-2011-47644.3 MediumDecember 16, 2011
parallels plesk small business panelMultiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels...CVE-2011-47637.5 HighDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain...CVE-2011-476210.0 HighDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for...CVE-2011-476110.0 HighDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are...CVE-2011-47605.0 MediumDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in...CVE-2011-47595.0 MediumDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which...CVE-2011-47585.0 MediumDecember 16, 2011
parallels plesk small business panelParallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the...CVE-2011-475710.0 HighDecember 16, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open