Skip to content
OpenAdvisories

Archive

July 2011

Vulnerabilities first published in this month (UTC), newest first.

← June 2011 2011 / July August 2011 →
  1. 139
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 65
  7. 712
  8. 812
  9. 9 
  10. 10 
  11. 118
  12. 12 
  13. 1321
  14. 1411
  15. 15 
  16. 16 
  17. 1717
  18. 188
  19. 1912
  20. 2046
  21. 2165
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2813
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

307 results · Feed

  • Unscored —
    CVE-2011-2510

    Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows r…

    dokuwiki Debian
  • Medium —
    CVE-2011-2526

    Improper Input Validation in Apache Tomcat

    Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2011-2220 EPSS 16%

    Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Rep…

  • Medium —
    CVE-2011-2505 Public exploit EPSS 13%

    phpMyAdmin remote variable manipulation

    libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSIO…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-2507

    libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x befo…

    phpmyadmin Debian
  • High —
    CVE-2011-2508

    phpMyAdmin Directory Traversal vulnerability

    Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local file…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High —
    CVE-2011-2506 Public exploit

    phpMyAdmin vulnerable to static code injection

    setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the abil…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-2023

    Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to…

  • Unscored —
    CVE-2010-4554

    functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-…

  • Unscored —
    CVE-2010-4555

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2011-1885

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  • Unscored —
    CVE-2011-1283

    The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Se…

  • Unscored —
    CVE-2011-1879

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-1883

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-1882

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • High 8.4
    CVE-2011-1282

    The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Se…

  • Unscored —
    CVE-2011-1875

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-1870

    Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2…

  • Unscored —
    CVE-2011-1878

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-1884

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-1877

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows S…

  • High 8.4
    CVE-2011-1881

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  • Unscored —
    CVE-2011-1886

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions…

  • Unscored —
    CVE-2011-1284

    Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2…

  • Unscored —
    CVE-2011-1888

    win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2…

  • Unscored —
    CVE-2011-1876

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • High 7.8
    CVE-2011-1887

    win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2…

  • Unscored —
    CVE-2011-1880

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 a…

  • High 7.8
    CVE-2011-1874

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2011-1281

    The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Se…

  • Unscored —
    CVE-2011-1265

    The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to ob…

  • Unscored —
    CVE-2011-0549

    SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers t…

  • Unscored —
    CVE-2011-1526

    ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not chec…

  • Unscored —
    CVE-2011-1867 EPSS 26%

    Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoin…

  • Unscored —
    CVE-2011-1338

    Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .e…

  • Unscored —
    CVE-2011-1951

    lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly o…

    syslog-ng Debian
  • Unscored —
    CVE-2011-2064

    Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote at…

  • Unscored —
    CVE-2011-2398

    Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain pr…

  • Unscored —
    CVE-2011-2516

    Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 …

    xml-security-c Debian
  • Unscored —
    CVE-2010-4811

    Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attacker…