Skip to content
OpenAdvisories

Archive

July 2011

Vulnerabilities first published in this month (UTC), newest first.

← June 2011 2011 / July August 2011 →
  1. 139
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 65
  7. 712
  8. 812
  9. 9 
  10. 10 
  11. 118
  12. 12 
  13. 1321
  14. 1411
  15. 15 
  16. 16 
  17. 1717
  18. 188
  19. 1912
  20. 2046
  21. 2165
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2813
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

307 results · Feed

  • Unscored —
    CVE-2010-4810 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to…

  • Unscored —
    CVE-2010-4812

    Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2010-4814 Public exploit

    SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attack…

  • Unscored —
    CVE-2010-4809 Public exploit

    SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-4813

    Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote auth…

  • Unscored —
    CVE-2010-4808 Public exploit

    SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2011-2464 EPSS 19%

    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 al…

    bind9 Debian
  • Unscored —
    CVE-2011-2465

    Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Respo…

    bind9 Debian
  • Unscored —
    CVE-2011-2664

    Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCent…

  • Unscored —
    CVE-2011-1001

    dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote …

  • Unscored —
    CVE-2011-2344

    Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtai…

  • Unscored —
    CVE-2011-1931

    sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in Vid…

  • Unscored —
    CVE-2011-1946

    gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure …

  • Unscored —
    CVE-2011-1224

    IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate …

  • Medium —
    CVE-2011-1498

    Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient

    Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.

    org.apache.httpcomponents:httpclient httpcomponents-client Debian Maven
  • Unscored —
    CVE-2011-2192

    The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other produ…

    curl Debian
  • Unscored —
    CVE-2011-1336

    Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.

  • Unscored —
    CVE-2011-2678

    The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACT…

  • Unscored —
    CVE-2011-2597

    The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers …

    wireshark Debian
  • Unscored —
    CVE-2011-2679

    Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers …

  • Unscored —
    CVE-2011-2681

    IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact an…

  • Unscored —
    CVE-2011-2682

    The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a …

  • Unscored —
    CVE-2011-2680

    Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack ve…

  • Unscored —
    CVE-2011-2665

    reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to caus…

    asterisk Debian
  • Unscored —
    CVE-2011-2666

    The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through …

    asterisk Debian
  • Unscored —
    CVE-2011-2535

    chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.…

    asterisk Debian
  • Unscored —
    CVE-2011-2529

    chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not …

    asterisk Debian
  • Unscored —
    CVE-2011-2536

    chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.…

    asterisk Debian
  • Unscored —
    CVE-2011-1866 Public exploit EPSS 21%

    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remo…

  • Unscored —
    CVE-2011-1865 Public exploit EPSS 89%

    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow…

  • Unscored —
    CVE-2011-1337

    Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigge…

  • Unscored —
    CVE-2011-1515

    The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2011-1514

    The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2011-2626

    Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" …

  • Unscored —
    CVE-2011-2632

    Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cau…

  • Unscored —
    CVE-2011-2640

    Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that h…

  • Unscored —
    CVE-2011-2623

    Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2011-2616

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumptio…

  • Unscored —
    CVE-2011-2618

    Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a…

  • Unscored —
    CVE-2011-2636

    Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash…