CVEs published December 7, 2011
29 CVEs were published on December 7, 2011: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 29
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 28
- CVE-2011-4693Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a
- CVE-2011-4694Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a
- CVE-2011-4695Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restric
- CVE-2002-2435The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-
- CVE-2002-2436The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not pro
- CVE-2002-2437The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the
- CVE-2010-5068The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attack
- CVE-2010-5069The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote a
- CVE-2010-5070The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComp
- CVE-2010-5071The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the o
- CVE-2010-5072The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputed
- CVE-2010-5073The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getCom
- CVE-2010-5074The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and un
- CVE-2011-4263Cross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbi
- CVE-2011-4679vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated us
- CVE-2011-4680Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbit
- CVE-2011-4681Opera before 11.60 does not properly consider the number of .
- CVE-2011-4682The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Or
- CVE-2011-4683Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."
- CVE-2011-4684Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corne
- CVE-2011-4685Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web pa
- CVE-2011-4686Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service (appl
- CVE-2011-4687Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page,
- CVE-2011-4688Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading at
- CVE-2011-4689Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME load
- CVE-2011-4690Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, wh
- CVE-2011-4691Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loadi
- CVE-2011-4692WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required