Skip to content
OpenAdvisories

Archive

July 2011

Vulnerabilities first published in this month (UTC), newest first.

← June 2011 2011 / July August 2011 →
  1. 139
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 65
  7. 712
  8. 812
  9. 9 
  10. 10 
  11. 118
  12. 12 
  13. 1321
  14. 1411
  15. 15 
  16. 16 
  17. 1717
  18. 188
  19. 1912
  20. 2046
  21. 2165
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2813
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

307 results · Feed

  • Unscored —
    CVE-2011-2400

    Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2011-2697 EPSS 11%

    foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code vi…

    hplip foomatic-filters Debian
  • Unscored —
    CVE-2011-2401

    Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via u…

  • Unscored —
    CVE-2011-2522 Public exploit EPSS 11%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x bef…

    samba Debian
  • Unscored —
    CVE-2011-2964

    foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code v…

    foomatic-filters Debian
  • Unscored —
    CVE-2011-2694

    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool …

    samba Debian
  • Unscored —
    CVE-2011-2960 Public exploit EPSS 18%

    Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers …

  • Unscored —
    CVE-2011-2963 Public exploit

    TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, wh…

  • Unscored —
    CVE-2011-2959

    Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interac…

  • Unscored —
    CVE-2011-2961

    Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-2962

    Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote atta…

  • Unscored —
    CVE-2011-2546

    SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with softw…

  • Unscored —
    CVE-2011-2547

    The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote…

  • Unscored —
    CVE-2011-2492

    The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which …

  • Unscored —
    CVE-2011-2549

    Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series de…

  • Unscored —
    CVE-2011-2689

    The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chu…

  • Unscored —
    CVE-2011-2695

    Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial…

  • Unscored —
    CVE-2011-2667 EPSS 16%

    Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r1…

  • Unscored —
    CVE-2011-1339

    Cross-site scripting (XSS) vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2011-2958

    Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers…

  • Unscored —
    CVE-2011-2957

    Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local…

  • Unscored —
    CVE-2011-2688

    SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache H…

    libapache2-mod-authnz-external Debian
  • Unscored —
    CVE-2011-2956 Public exploit

    AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote a…

  • Unscored —
    CVE-2011-2747

    Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote a…

  • Unscored —
    CVE-2011-2892

    Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes i…

  • Unscored —
    CVE-2011-2890

    The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier …

  • Unscored —
    CVE-2011-2886

    IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx do…

  • Unscored —
    CVE-2011-2893

    The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2011-2891

    Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter …

  • Unscored —
    CVE-2011-2889

    templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via un…

  • Unscored —
    CVE-2011-2888

    IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex gra…

  • Medium —
    CVE-2011-2509

    Joomla! vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as demonstrated by the Itemid parameter to index.php; (2) the quer…

    joomla/joomla-cms Packagist
  • Unscored —
    CVE-2011-2887

    IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a…

  • Unscored —
    CVE-2011-2885

    IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample…

  • Unscored —
    CVE-2011-2488

    Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information…

  • Unscored —
    CVE-2011-2710

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2011-2884

    Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related…

  • Unscored —
    CVE-2011-1829

    APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to insta…

    apt Debian
  • Unscored —
    CVE-2011-2490

    opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, whi…

  • Unscored —
    CVE-2011-2588

    Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media play…

    vlc Debian