Skip to content
OpenAdvisories

Archive

27 July 2011

Vulnerabilities first published on this day (UTC), newest first.

← June 2011 2011 / July /27 August 2011 →
  1. 139
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 65
  7. 712
  8. 812
  9. 9 
  10. 10 
  11. 118
  12. 12 
  13. 1321
  14. 1411
  15. 15 
  16. 16 
  17. 1717
  18. 188
  19. 1912
  20. 2046
  21. 2165
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2813
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2011-2892

    Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes i…

  • Unscored —
    CVE-2011-2890

    The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier …

  • Unscored —
    CVE-2011-2886

    IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx do…

  • Unscored —
    CVE-2011-2893

    The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2011-2891

    Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter …

  • Unscored —
    CVE-2011-2889

    templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via un…

  • Unscored —
    CVE-2011-2888

    IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex gra…

  • Medium —
    CVE-2011-2509

    Joomla! vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as demonstrated by the Itemid parameter to index.php; (2) the quer…

    joomla/joomla-cms Packagist
  • Unscored —
    CVE-2011-2887

    IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a…

  • Unscored —
    CVE-2011-2885

    IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample…

  • Unscored —
    CVE-2011-2488

    Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information…

  • Unscored —
    CVE-2011-2710

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2011-2884

    Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related…

  • Unscored —
    CVE-2011-1829

    APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to insta…

    apt Debian
  • Unscored —
    CVE-2011-2490

    opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, whi…

  • Unscored —
    CVE-2011-2588

    Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media play…

    vlc Debian
  • Unscored —
    CVE-2011-2696

    Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) o…

    libsndfile Debian
  • High —
    CVE-2011-2687

    Drupal Access Control Bypass

    Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.

    drupal/core Packagist
  • Medium —
    CVE-2011-2185

    Fabric vulnerable to symlink attack on tmp files

    Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.

    fabric fabric Debian PyPI
  • Unscored —
    CVE-2011-2467

    SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and…

  • Unscored —
    CVE-2011-2196

    jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform…

  • Unscored —
    CVE-2011-2745 Public exploit

    upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restric…

  • Unscored —
    CVE-2011-2587

    Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media play…

    vlc Debian
  • Unscored —
    CVE-2011-2489

    Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privil…

  • Medium 6.8
    CVE-2009-4139

    Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

    A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding n…

    Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  • Unscored —
    CVE-2011-1782

    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2…

    gimp Debian
  • Unscored —
    CVE-2011-1484

    jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform…