6 June 2011

23 results · Feed

• Unscored —
  CVE-2011-0082

  The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement singl…

  Jun 6, 2011
• Unscored —
  CVE-2011-0767

  Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web …

  Jun 6, 2011
• Medium 6.1
  CVE-2011-1948

  Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool

  Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

  plone products-cmfplone products-passwordresettool PyPI
  Jun 6, 2011
• Unscored —
  CVE-2011-1954

  Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attacke…

  Jun 6, 2011
• Medium 5.4
  CVE-2011-1949

  Plone Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-24…

  plone PyPI
  Jun 6, 2011
• Unscored —
  CVE-2011-1178

  Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in G…

  gimp Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1921

  The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, w…

  subversion Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1958

  Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service…

  wireshark Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1959

  The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly ha…

  wireshark Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1783

  The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, w…

  subversion Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1952

  common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via …

  Jun 6, 2011
• Unscored —
  CVE-2011-1787

  Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VM…

  open-vm-tools Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1752

  The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote att…

  subversion Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1956 Public exploit

  The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cau…

  wireshark Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-1953

  Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attac…

  Jun 6, 2011
• Medium 6.5
  CVE-2011-1950

  Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

  plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

  plone plone-app-users PyPI
  Jun 6, 2011
• Unscored —
  CVE-2011-1957

  The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 a…

  wireshark Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-2145

  mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x …

  open-vm-tools Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-2174

  Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x be…

  wireshark Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-2217 Public exploit EPSS 42%

  Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.…

  Jun 6, 2011
• Unscored —
  CVE-2011-2175

  Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4…

  wireshark Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-2216

  reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain str…

  asterisk Debian
  Jun 6, 2011
• Unscored —
  CVE-2011-2146

  mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x …

  open-vm-tools Debian
  Jun 6, 2011