Skip to content
OpenAdvisories

Archive

June 2011

Vulnerabilities first published in this month (UTC), newest first.

← May 2011 2011 / June July 2011 →
  1. 1 
  2. 218
  3. 32
  4. 4 
  5. 5 
  6. 623
  7. 74
  8. 85
  9. 932
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1432
  15. 15 
  16. 1677
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 2114
  22. 2213
  23. 23 
  24. 2426
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2915
  30. 3033
All Critical High Medium Low Exploited only Public exploit

294 results · Feed

  • Unscored —
    CVE-2011-2345

    The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote att…

  • Unscored —
    CVE-2011-2180

    Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attacker…

  • Medium —
    CVE-2011-2204

    Insertion of Sensitive Information into Log File in Apache Tomcat

    Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information …

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2011-2470

    Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat (ARSC) 3.3-rc2 allows rem…

  • Unscored —
    CVE-2011-2348

    Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attack…

  • Unscored —
    CVE-2011-2350

    The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which…

  • Unscored —
    CVE-2011-2351

    Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2347

    Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows r…

  • Unscored —
    CVE-2011-0196

    AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of-bounds read and reboot) v…

  • Unscored —
    CVE-2011-0206

    Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent …

  • Unscored —
    CVE-2011-0213

    Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2011-0205

    Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2011-0207

    The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e…

  • Unscored —
    CVE-2011-0212

    servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requ…

  • Unscored —
    CVE-2011-0211

    Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2011-0200

    Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2011-0208

    QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of s…

  • Unscored —
    CVE-2011-0203

    Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remot…

  • Unscored —
    CVE-2011-0201

    Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to …

  • Unscored —
    CVE-2011-0202

    Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2011-0210

    QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —
    CVE-2011-0204

    Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2011-0209

    Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2011-0197

    App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow l…

  • Medium 5.9
    CVE-2011-0199

    The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Valid…

  • Unscored —
    CVE-2011-0198

    Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to exec…

  • Unscored —
    CVE-2011-1908

    Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote atta…

  • Unscored —
    CVE-2011-1132

    The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (…

  • Unscored —
    CVE-2011-1770

    Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows r…

  • Unscored —
    CVE-2011-1409

    Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attacke…

    fex Debian
  • Unscored —
    CVE-2011-2484

    The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple …

  • Unscored —
    CVE-2011-2194 Public exploit

    Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers t…

    vlc Debian
  • Unscored —
    CVE-2011-2193

    Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before …

  • Unscored —
    CVE-2009-5044

    contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a s…

    groff Debian
  • Unscored —
    CVE-2011-2533

    The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a syml…

    dbus Debian
  • Unscored —
    CVE-2011-2534

    Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2…

  • Unscored —
    CVE-2011-1170

    net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expecte…

  • Unscored —
    CVE-2011-1330

    Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE …

  • Unscored —
    CVE-2011-1172

    net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expecte…

  • Unscored —
    CVE-2011-1171

    net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected…