July 2011

307 results · Feed

• Unscored —
  CVE-2011-2696

  Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) o…

  libsndfile Debian
  Jul 27, 2011
• High —
  CVE-2011-2687

  Drupal Access Control Bypass

  Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.

  drupal/core Packagist
  Jul 27, 2011
• Medium —
  CVE-2011-2185

  Fabric vulnerable to symlink attack on tmp files

  Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.

  fabric fabric Debian PyPI
  Jul 27, 2011
• Unscored —
  CVE-2011-2467

  SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and…

  Jul 27, 2011
• Unscored —
  CVE-2011-2196

  jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform…

  Jul 27, 2011
• Unscored —
  CVE-2011-2745 Public exploit

  upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restric…

  Jul 27, 2011
• Unscored —
  CVE-2011-2587

  Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media play…

  vlc Debian
  Jul 27, 2011
• Unscored —
  CVE-2011-2489

  Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privil…

  Jul 27, 2011
• Medium 6.8
  CVE-2009-4139

  Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

  A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding n…

  Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  Jul 27, 2011
• Unscored —
  CVE-2011-1782

  Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2…

  gimp Debian
  Jul 27, 2011
• Unscored —
  CVE-2011-1484

  jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform…

  Jul 27, 2011
• Unscored —
  CVE-2011-0218

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0234

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0217

  Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allo…

  Jul 21, 2011
• Unscored —
  CVE-2011-0233

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0232

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0254

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0244

  WebKit in Apple Safari before 5.0.6 allows user-assisted remote attackers to read arbitrary files via vectors related t…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0221

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0225

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0219

  Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text fr…

  Jul 21, 2011
• Unscored —
  CVE-2011-0253

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0215

  ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attac…

  Jul 21, 2011
• Unscored —
  CVE-2011-0235

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0255

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0241

  Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or…

  Jul 21, 2011
• Unscored —
  CVE-2011-0238

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0223

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0216

  Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a de…

  libxml2 Debian
  Jul 21, 2011
• Unscored —
  CVE-2011-0214

  CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root cert…

  Jul 21, 2011
• Unscored —
  CVE-2011-0242

  Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0.6 allows remote attackers to inject arbit…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0237

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0222 Public exploit EPSS 22%

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0240

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-1288

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-1797

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-1462

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-1457

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-1774 Public exploit EPSS 43%

  WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arb…

  Jul 21, 2011
• Unscored —
  CVE-2011-1453

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011