Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
December

CVEs published in December 2011

352 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

nvidia stereoscopic 3d driverThe NVIDIA Stereoscopic 3D driver before 7.17.12.7565 does not properly handle commands sent to a...CVE-2011-47847.2 HighDecember 27, 2011
7t igssMultiple buffer overflows in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0...CVE-2011-45377.5 HighDecember 27, 2011
wellintech kingviewHeap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in...CVE-2011-453610.0 HighDecember 27, 2011
hp managed printing administrationUnspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote...CVE-2011-41697.5 HighDecember 27, 2011
hp managed printing administrationDirectory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing...CVE-2011-41687.5 HighDecember 27, 2011
hp managed printing administrationStack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4...CVE-2011-41677.5 HighDecember 27, 2011
hp managed printing administrationDirectory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed...CVE-2011-4166Public exploitEPSS 58.3%7.5 HighDecember 27, 2011
7t igssBuffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200...CVE-2011-4050EPSS 20.1%5.0 MediumDecember 27, 2011
attachmate reflection, reflection 2008, reflection 2008r1 +2 more +4 moreHeap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other...CVE-2011-5012Public exploit10.0 HighDecember 25, 2011
xt-commerceMultiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and...CVE-2011-50116.8 MediumDecember 25, 2011
ctekproducts skyrouterapps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute...CVE-2011-5010Public exploitEPSS 64.3%10.0 HighDecember 25, 2011
3ssoftware codesysThe CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote...CVE-2011-5009Public exploitEPSS 10.4%5.0 MediumDecember 25, 2011
3ssoftware codesysInteger overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote...CVE-2011-50087.5 HighDecember 25, 2011
3ssoftware codesysStack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and...CVE-2011-5007Public exploitEPSS 72.7%10.0 HighDecember 25, 2011
qqplayerStack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code...CVE-2011-5006Public exploit9.3 HighDecember 25, 2011
claudio klingler quixplorer, mads brunn t3quixplorer +1 moreUnrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to...CVE-2011-5005Public exploit7.5 HighDecember 25, 2011
fabrikar com fabrikarUnrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik)...CVE-2011-50046.0 MediumDecember 25, 2011
avid media composerStack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media...CVE-2011-5003Public exploitEPSS 61.7%10.0 HighDecember 25, 2011
finaldraftMultiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to...CVE-2011-5002Public exploit10.0 HighDecember 25, 2011
trend micro control managerStack-based buffer overflow in the CGenericScheduler::AddTask function in...CVE-2011-5001Public exploitEPSS 63.7%10.0 HighDecember 25, 2011
pidginfamily_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not...CVE-2011-4601Fix available5.0 MediumDecember 25, 2011
mini-stream rm-mp3 converterStack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to...CVE-2010-5081Public exploitEPSS 30.9%9.3 HighDecember 25, 2011
mini-stream ripperStack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute...CVE-2009-5109Public exploitEPSS 32.5%9.3 HighDecember 25, 2011
freebsd, gnu inetutils, heimdal project heimdal +7 more +9 moreBuffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos...CVE-2011-4862Public exploitFix availableEPSS 95.1%10.0 HighDecember 25, 2011
wuzlyThe administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by...CVE-2011-38397.5 HighDecember 24, 2011
wuzlyMultiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary...CVE-2011-38387.5 HighDecember 24, 2011
wuzlyDirectory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote...CVE-2011-38376.8 MediumDecember 24, 2011
wuzlyMultiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to...CVE-2011-38366.8 MediumDecember 24, 2011
wuzlyMultiple cross-site scripting (XSS) vulnerabilities in Wuzly 2.0 allow remote attackers to inject...CVE-2011-38354.3 MediumDecember 24, 2011
rpmRPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of...CVE-2011-3378Fix available9.3 HighDecember 24, 2011
openstack novaOpenStack Nova Multiple directory traversal vulnerabilitiesCVE-2011-4596Fix available6.0 MediumDecember 23, 2011
.bbsoftware bb flashbackThe Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack,...CVE-2011-13929.3 HighDecember 23, 2011
.bbsoftware bb flashbackThe Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack,...CVE-2011-13919.3 HighDecember 23, 2011
.bbsoftware bb flashbackThe Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack,...CVE-2011-13889.3 HighDecember 23, 2011
torTor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option,...CVE-2011-4897Fix available4.3 MediumDecember 23, 2011
torTor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but...CVE-2011-4896Fix available4.3 MediumDecember 23, 2011
torTor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different...CVE-2011-4895Fix available4.3 MediumDecember 23, 2011
torTor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS...CVE-2011-4894Fix available4.3 MediumDecember 23, 2011
linux kernel, suse linux enterprise server +1 moreThe Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local...CVE-2011-4127Fix available4.6 MediumDecember 23, 2011
phpmyadminphpMyAdmin Cross-site Scripting vulnerabilityCVE-2011-4782Fix available4.3 MediumDecember 22, 2011
phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in...CVE-2011-4780Fix available4.3 MediumDecember 22, 2011
phpmyadminphpMyAdmin vulnerable to Cross-site ScriptingCVE-2011-4634Fix available4.3 MediumDecember 22, 2011
pukiwiki plus\!Cross-site scripting (XSS) vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2...CVE-2011-39904.3 MediumDecember 22, 2011
pmwikiThe PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote...CVE-2011-4453Public exploitEPSS 52.0%7.5 HighDecember 22, 2011
moodleMoodle CRLF Injection Vulnerability in Calendar ComponentCVE-2011-4203Fix available5.0 MediumDecember 22, 2011
sielcosistemi winlog lite, winlog pro +1 moreBuffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows...CVE-2011-40379.3 HighDecember 22, 2011
mozilla firefox, thunderbird +1 moreMozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar...CVE-2011-36666.8 MediumDecember 21, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow...CVE-2011-36657.5 HighDecember 21, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not...CVE-2011-36646.8 MediumDecember 21, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow...CVE-2011-36634.3 MediumDecember 21, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open