Skip to content
OpenAdvisories

Archive

June 2011

Vulnerabilities first published in this month (UTC), newest first.

← May 2011 2011 / June July 2011 →
  1. 1 
  2. 218
  3. 32
  4. 4 
  5. 5 
  6. 623
  7. 74
  8. 85
  9. 932
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1432
  15. 15 
  16. 1677
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 2114
  22. 2213
  23. 23 
  24. 2426
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2915
  30. 3033
All Critical High Medium Low Exploited only Public exploit

294 results · Feed

  • Unscored —
    CVE-2011-1173

    The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows r…

  • Unscored —
    CVE-2011-2200

    The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.1…

    dbus Debian
  • Unscored —
    CVE-2011-2206

    XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP …

  • Unscored —
    CVE-2011-2531

    Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, w…

    prosody Debian
  • Unscored —
    CVE-2011-2530

    Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Autom…

  • Unscored —
    CVE-2011-2205

    Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause…

    prosody Debian
  • Unscored —
    CVE-2011-2532

    The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial …

    prosody Debian
  • Unscored —
    CVE-2011-1482

    Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier …

  • Unscored —
    CVE-2011-1753

    expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect rec…

    ejabberd Debian
  • Unscored —
    CVE-2011-1131

    The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses cert…

  • Unscored —
    CVE-2011-1128

    The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does no…

  • Unscored —
    CVE-2011-1755

    jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cau…

    jabberd2 Debian
  • Unscored —
    CVE-2011-1127

    SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, …

  • Unscored —
    CVE-2011-1756

    modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which …

  • Unscored —
    CVE-2011-1757

    DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to …

  • Unscored —
    CVE-2011-1480

    SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allo…

  • Unscored —
    CVE-2011-1754

    jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers…

  • Unscored —
    CVE-2011-1130

    Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, whic…

  • Unscored —
    CVE-2011-1481

    Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers …

  • Unscored —
    CVE-2011-1129

    Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) befo…

  • Unscored —
    CVE-2011-2188

    LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to caus…

    lua-expat Debian
  • Unscored —
    CVE-2011-0319

    Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-0320

    Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-0317

    Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-0335

    Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-0318

    Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-0629

    Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers …

  • Unscored —
    CVE-2011-2097

    Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac O…

  • Unscored —
    CVE-2011-2127

    Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2011-2096

    Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Window…

  • Unscored —
    CVE-2011-2120

    Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execu…

  • Unscored —
    CVE-2011-2123

    Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote atta…

  • Unscored —
    CVE-2011-2095 EPSS 16%

    Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac O…

  • Unscored —
    CVE-2011-2128

    Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2011-2116

    IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of s…

  • Unscored —
    CVE-2011-2124

    Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2011-2126

    Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified …

  • Unscored —
    CVE-2011-2102

    Unspecified vulnerability in Adobe Reader and Acrobat before 10.1 on Windows and Mac OS X allows attackers to bypass in…

  • Unscored —
    CVE-2011-2112

    Multiple buffer overflows in IML32.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary…

  • Unscored —
    CVE-2011-2202 Public exploit EPSS 20%

    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipa…