Skip to content
OpenAdvisories

Archive

June 2011

Vulnerabilities first published in this month (UTC), newest first.

← May 2011 2011 / June July 2011 →
  1. 1 
  2. 218
  3. 32
  4. 4 
  5. 5 
  6. 623
  7. 74
  8. 85
  9. 932
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1432
  15. 15 
  16. 1677
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 2114
  22. 2213
  23. 23 
  24. 2426
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2915
  30. 3033
All Critical High Medium Low Exploited only Public exploit

294 results · Feed

  • Unscored —
    CVE-2011-0085

    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird befor…

  • Unscored —
    CVE-2011-0083

    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists i…

  • Unscored —
    CVE-2011-2368

    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows…

  • Unscored —
    CVE-2011-2607

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2011-2606

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers t…

  • Unscored —
    CVE-2011-2369

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2011-2364

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 al…

  • Unscored —
    CVE-2011-2365

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 al…

  • Unscored —
    CVE-2011-2376

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.…

  • Unscored —
    CVE-2011-2377

    Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remo…

  • Unscored —
    CVE-2011-2371 Public exploit EPSS 76%

    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird be…

  • Unscored —
    CVE-2011-2363

    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists i…

  • Unscored —
    CVE-2011-2373

    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and Sea…

  • Unscored —
    CVE-2011-2362

    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cooki…

  • Unscored —
    CVE-2011-2605

    CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService…

  • Unscored —
    CVE-2011-2367

    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows …

  • Unscored —
    CVE-2011-2370

    Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote…

  • Unscored —
    CVE-2011-2374

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and …

  • Unscored —
    CVE-2011-2375

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11…

  • Unscored —
    CVE-2011-2598

    The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitra…

  • Unscored —
    CVE-2011-2603

    The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) vi…

  • Unscored —
    CVE-2011-2602

    The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (syst…

  • Unscored —
    CVE-2011-2601

    The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to c…

  • Unscored —
    CVE-2011-2600 EPSS 12%

    The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to…

  • Medium —
    CVE-2011-2197

    rails Cross-site Scripting vulnerability

    The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via craft…

    actionpack activesupport RubyGems
  • Unscored —
    CVE-2011-2599

    Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain…

  • Unscored —
    CVE-2011-2366

    Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domai…

  • Unscored —
    CVE-2011-2604

    The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash)…

  • Unscored —
    CVE-2009-5079

    The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 …

    groff Debian
  • Unscored —
    CVE-2009-5078

    contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER op…

    groff Debian
  • Unscored —
    CVE-2009-5082

    The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improp…

    groff Debian
  • Unscored —
    CVE-2009-5081

    The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (…

    groff Debian
  • Unscored —
    CVE-2009-5080

    The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh sc…

    groff groff Debian Ubuntu
  • Unscored —
    CVE-2011-1332

    Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2011-1334

    Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1…

  • Unscored —
    CVE-2011-1335

    Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2011-1333

    Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attacke…

  • Unscored —
    CVE-2011-2181

    Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2011-2346

    Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2349

    Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service …