# CVEs published 2011-12-23

11 CVEs were published on December 23, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1388](https://cve.now/CVE-2011-1388.md): The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6. (no CVSS)
- [CVE-2011-1391](https://cve.now/CVE-2011-1391.md): The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6. (no CVSS)
- [CVE-2011-1392](https://cve.now/CVE-2011-1392.md): The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6. (no CVSS)
- [CVE-2011-4596](https://cve.now/CVE-2011-4596.md): Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration (no CVSS, nova)
- [CVE-2011-2768](https://cve.now/CVE-2011-2768.md): Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows (no CVSS)
- [CVE-2011-2769](https://cve.now/CVE-2011-2769.md): Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE\_FAST values in the Command field of a cell within an OR conn (no CVSS)
- [CVE-2011-2778](https://cve.now/CVE-2011-2778.md): Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possi (no CVSS)
- [CVE-2011-4894](https://cve.now/CVE-2011-4894.md): Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which ma (no CVSS)
- [CVE-2011-4895](https://cve.now/CVE-2011-4895.md): Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which make (no CVSS)
- [CVE-2011-4896](https://cve.now/CVE-2011-4896.md): Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might al (no CVSS)
- [CVE-2011-4897](https://cve.now/CVE-2011-4897.md): Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname val (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.