CVEs published in June 2011

301 vulnerabilities, 106 critical, 2 exploited.

• ibm rational team concert Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote... CVE-2011-2607 4.3 MediumJune 30, 2011
• ibm rational team concert Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0... CVE-2011-2606 4.3 MediumJune 30, 2011
• mozilla firefox, thunderbird +1 more CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk... CVE-2011-2605 Fix available 4.3 MediumJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey... CVE-2011-2377 Fix available 5.0 MediumJune 30, 2011
• mozilla firefox, thunderbird +1 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and... CVE-2011-2376 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, thunderbird +1 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and... CVE-2011-2375 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, thunderbird +1 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4... CVE-2011-2374 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird... CVE-2011-2373 Fix available 7.6 HighJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through... CVE-2011-2371 Public exploitFix available EPSS 75.7% 10.0 HighJune 30, 2011
• mozilla firefox Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall... CVE-2011-2370 Fix available 5.0 MediumJune 30, 2011
• mozilla firefox Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote... CVE-2011-2369 Fix available 4.3 MediumJune 30, 2011
• mozilla firefox The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write... CVE-2011-2368 Fix available 10.0 HighJune 30, 2011
• mozilla firefox The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read... CVE-2011-2367 Fix available 6.4 MediumJune 30, 2011
• mozilla firefox, thunderbird +1 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and... CVE-2011-2365 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, thunderbird +1 more Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and... CVE-2011-2364 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation... CVE-2011-2363 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not... CVE-2011-2362 Fix available 5.0 MediumJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6... CVE-2011-0085 Fix available 10.0 HighJune 30, 2011
• mozilla firefox, seamonkey, thunderbird +2 more Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation... CVE-2011-0083 Fix available 10.0 HighJune 30, 2011
• intel g41 driver The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of... CVE-2011-2604 7.1 HighJune 30, 2011
• nvidia 9400m driver The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of... CVE-2011-2603 7.1 HighJune 30, 2011
• nvidia geforce 310 driver The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a... CVE-2011-2602 7.1 HighJune 30, 2011
• apple mac os x The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows... CVE-2011-2601 7.1 HighJune 30, 2011
• microsoft windows xp The GPU support functionality in Windows XP does not properly restrict rendering time, which... CVE-2011-2600 EPSS 11.8% 7.1 HighJune 30, 2011
• google chrome Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows... CVE-2011-2599 4.3 MediumJune 30, 2011
• mozilla firefox The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of... CVE-2011-2598 4.3 MediumJune 30, 2011
• mozilla firefox, gecko, thunderbird +2 more Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not... CVE-2011-2366 Fix available 4.3 MediumJune 30, 2011
• rubyonrails rails, ruby on rails +1 more rails Cross-site Scripting vulnerability CVE-2011-2197 Fix available 4.3 MediumJune 30, 2011
• gnu groff The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*... CVE-2009-5082 Fix available 3.3 LowJune 30, 2011
• gnu groff The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl... CVE-2009-5081 Fix available 3.3 LowJune 30, 2011
• gnu groff The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib... CVE-2009-5080 Fix available 3.3 LowJune 30, 2011
• gnu groff The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU... CVE-2009-5079 Fix available 3.3 LowJune 30, 2011
• gnu groff, apple mac os x +1 more contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program... CVE-2009-5078 Fix available 6.5 MediumJune 30, 2011
• reallysimplechat really simple chat Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat ... CVE-2011-2470 4.3 MediumJune 29, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to... CVE-2011-2351 6.8 MediumJune 29, 2011
• google chrome The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re... CVE-2011-2350 6.8 MediumJune 29, 2011
• google chrome Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to... CVE-2011-2349 6.8 MediumJune 29, 2011
• google chrome Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check,... CVE-2011-2348 6.8 MediumJune 29, 2011
• google chrome Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token... CVE-2011-2347 6.8 MediumJune 29, 2011
• google chrome Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to... CVE-2011-2346 6.8 MediumJune 29, 2011
• google chrome The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings,... CVE-2011-2345 4.3 MediumJune 29, 2011
• apache tomcat Insertion of Sensitive Information into Log File in Apache Tomcat CVE-2011-2204 Fix available 1.9 LowJune 29, 2011
• reallysimplechat really simple chat Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote... CVE-2011-2181 7.5 HighJune 29, 2011
• reallysimplechat really simple chat Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2... CVE-2011-2180 4.3 MediumJune 29, 2011
• cybozu office Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote... CVE-2011-1335 4.3 MediumJune 29, 2011
• cybozu collaborex, dezie, garoon +2 more +4 more Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3,... CVE-2011-1334 4.3 MediumJune 29, 2011
• cybozu garoon, office +1 more Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3... CVE-2011-1333 4.3 MediumJune 29, 2011
• cybozu garoon Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote... CVE-2011-1332 4.3 MediumJune 29, 2011
• clusterresources torque resource manager Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE... CVE-2011-2193 Fix available 8.5 HighJune 24, 2011
• foxitsoftware foxit reader Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0... CVE-2011-1908 9.3 HighJune 24, 2011
• Show olderLoading…