Skip to content
OpenAdvisories

Archive

July 2011

Vulnerabilities first published in this month (UTC), newest first.

← June 2011 2011 / July August 2011 →
  1. 139
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 65
  7. 712
  8. 812
  9. 9 
  10. 10 
  11. 118
  12. 12 
  13. 1321
  14. 1411
  15. 15 
  16. 16 
  17. 1717
  18. 188
  19. 1912
  20. 2046
  21. 2165
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2813
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High —
    CVE-2011-2687

    Drupal Access Control Bypass

    Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.

    drupal/core Packagist
  • High —
    CVE-2011-2528

    High severity vulnerability that affects Plone and Zope2

    Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious …

    plone zope2 PyPI
  • High —
    CVE-2011-2508

    phpMyAdmin Directory Traversal vulnerability

    Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local file…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High —
    CVE-2011-2506 Public exploit

    phpMyAdmin vulnerable to static code injection

    setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the abil…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High 8.4
    CVE-2011-1282

    The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Se…

  • High 8.4
    CVE-2011-1881

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  • High 7.8
    CVE-2011-1887

    win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2…

  • High 7.8
    CVE-2011-1874

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…