Skip to content
OpenAdvisories

Archive

July 2011

Vulnerabilities first published in this month (UTC), newest first.

← June 2011 2011 / July August 2011 →
  1. 139
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 65
  7. 712
  8. 812
  9. 9 
  10. 10 
  11. 118
  12. 12 
  13. 1321
  14. 1411
  15. 15 
  16. 16 
  17. 1717
  18. 188
  19. 1912
  20. 2046
  21. 2165
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2813
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

28 results · Clear filters · Feed

  • Unscored —
    CVE-2011-2522 Public exploit EPSS 11%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x bef…

    samba Debian
  • Unscored —
    CVE-2011-2960 Public exploit EPSS 18%

    Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers …

  • Unscored —
    CVE-2011-2963 Public exploit

    TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, wh…

  • Unscored —
    CVE-2011-2956 Public exploit

    AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote a…

  • Unscored —
    CVE-2011-2745 Public exploit

    upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restric…

  • Unscored —
    CVE-2011-0222 Public exploit EPSS 22%

    WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-1774 Public exploit EPSS 43%

    WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arb…

  • Unscored —
    CVE-2011-2882 Public exploit EPSS 56%

    Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise E…

  • Unscored —
    CVE-2011-2260 Public exploit

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote att…

  • Unscored —
    CVE-2011-1511 Public exploit EPSS 15%

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows …

  • Unscored —
    CVE-2011-2743 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2011-2780 Public exploit EPSS 13%

    Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbit…

  • Unscored —
    CVE-2011-2744 Public exploit

    Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary loc…

  • Unscored —
    CVE-2010-3271 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative cons…

  • Unscored —
    CVE-2011-2757 Public exploit EPSS 39%

    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remo…

  • Unscored —
    CVE-2011-2751 Public exploit

    SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspe…

  • Unscored —
    CVE-2011-2750 Public exploit EPSS 17%

    NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full p…

  • Unscored —
    CVE-2011-2755 Public exploit EPSS 31%

    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows rem…

  • Medium —
    CVE-2011-2505 Public exploit EPSS 13%

    phpMyAdmin remote variable manipulation

    libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSIO…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High —
    CVE-2011-2506 Public exploit

    phpMyAdmin vulnerable to static code injection

    setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the abil…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2010-4810 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to…

  • Unscored —
    CVE-2010-4814 Public exploit

    SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attack…

  • Unscored —
    CVE-2010-4809 Public exploit

    SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-4808 Public exploit

    SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2011-1866 Public exploit EPSS 21%

    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remo…

  • Unscored —
    CVE-2011-1865 Public exploit EPSS 89%

    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow…

  • Unscored —
    CVE-2011-2628 Public exploit EPSS 14%

    Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2011-2641 Public exploit

    Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a…