# CVEs published 2011-12-07 29 CVEs were published on December 7, 2011: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2011-4693](https://cve.now/CVE-2011-4693.md): Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a (no CVSS) - [CVE-2011-4694](https://cve.now/CVE-2011-4694.md): Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a (no CVSS) - [CVE-2011-4695](https://cve.now/CVE-2011-4695.md): Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restric (no CVSS) - [CVE-2002-2435](https://cve.now/CVE-2002-2435.md): The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo- (no CVSS) - [CVE-2002-2436](https://cve.now/CVE-2002-2436.md): The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not pro (no CVSS) - [CVE-2002-2437](https://cve.now/CVE-2002-2437.md): The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the (no CVSS) - [CVE-2010-5068](https://cve.now/CVE-2010-5068.md): The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attack (no CVSS) - [CVE-2010-5069](https://cve.now/CVE-2010-5069.md): The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote a (no CVSS) - [CVE-2010-5070](https://cve.now/CVE-2010-5070.md): The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComp (no CVSS) - [CVE-2010-5071](https://cve.now/CVE-2010-5071.md): The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the o (no CVSS) - [CVE-2010-5072](https://cve.now/CVE-2010-5072.md): The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputed (no CVSS) - [CVE-2010-5073](https://cve.now/CVE-2010-5073.md): The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getCom (no CVSS) - [CVE-2010-5074](https://cve.now/CVE-2010-5074.md): The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and un (no CVSS) - [CVE-2011-2462](https://cve.now/CVE-2011-2462.md): Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x (CVSS 8.8, KEV) - [CVE-2011-4263](https://cve.now/CVE-2011-4263.md): Cross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbi (no CVSS) - [CVE-2011-4679](https://cve.now/CVE-2011-4679.md): vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated us (no CVSS) - [CVE-2011-4680](https://cve.now/CVE-2011-4680.md): Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbit (no CVSS) - [CVE-2011-4681](https://cve.now/CVE-2011-4681.md): Opera before 11.60 does not properly consider the number of . (no CVSS) - [CVE-2011-4682](https://cve.now/CVE-2011-4682.md): The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Or (no CVSS) - [CVE-2011-4683](https://cve.now/CVE-2011-4683.md): Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue." (no CVSS) - [CVE-2011-4684](https://cve.now/CVE-2011-4684.md): Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corne (no CVSS) - [CVE-2011-4685](https://cve.now/CVE-2011-4685.md): Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web pa (no CVSS) - [CVE-2011-4686](https://cve.now/CVE-2011-4686.md): Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service (appl (no CVSS) - [CVE-2011-4687](https://cve.now/CVE-2011-4687.md): Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page, (no CVSS) - [CVE-2011-4688](https://cve.now/CVE-2011-4688.md): Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading at (no CVSS) - [CVE-2011-4689](https://cve.now/CVE-2011-4689.md): Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME load (no CVSS) - [CVE-2011-4690](https://cve.now/CVE-2011-4690.md): Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, wh (no CVSS) - [CVE-2011-4691](https://cve.now/CVE-2011-4691.md): Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loadi (no CVSS) - [CVE-2011-4692](https://cve.now/CVE-2011-4692.md): WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-12-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.