Skip to content
OpenAdvisories

Archive

June 2011

Vulnerabilities first published in this month (UTC), newest first.

← May 2011 2011 / June July 2011 →
  1. 1 
  2. 218
  3. 32
  4. 4 
  5. 5 
  6. 623
  7. 74
  8. 85
  9. 932
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1432
  15. 15 
  16. 1677
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 2114
  22. 2213
  23. 23 
  24. 2426
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2915
  30. 3033
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium —
    CVE-2011-2197

    rails Cross-site Scripting vulnerability

    The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via craft…

    actionpack activesupport RubyGems
  • Medium —
    CVE-2011-2204

    Insertion of Sensitive Information into Log File in Apache Tomcat

    Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information …

    org.apache.tomcat:tomcat Maven
  • Medium 5.9
    CVE-2011-0199

    The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Valid…

  • Medium 6.1
    CVE-2011-1252 EPSS 14%

    Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explore…

  • Medium 6.1
    CVE-2011-1948

    Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool

    Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

    plone products-cmfplone products-passwordresettool PyPI
  • Medium 5.4
    CVE-2011-1949

    Plone Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-24…

    plone PyPI
  • Medium 6.5
    CVE-2011-1950

    Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

    plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

    plone plone-app-users PyPI