CVEs published in June 2011
301 vulnerabilities, 106 critical, 2 exploited.
- creloaded cre loadedCRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to...7.5 High
- anymacro mail systemDirectory traversal vulnerability in the web interface in AnyMacro Mail System G4X allows remote...5.0 Medium
- cisco iosThe Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows...5.0 Medium
- adobe flash player, acrobat, acrobat reader +2 moreCross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac...4.3 Medium
- novell data synchronizer, mobility pack +1 moreUnspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0...5.5 Medium
- icinga, nagios +1 moreMultiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3...4.3 Medium
- tomsawyer get extension factory, vmware infrastructure, virtual infrastructure client +2 moreCertain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET...9.3 High
- digium asteriskreqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not...5.0 Medium
- wiresharkInteger underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2...4.3 Medium
- wiresharkDouble free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x...4.3 Medium
- vmware esx, esxi, fusion +2 more +4 moremount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4...2.1 Low
- vmware esx, esxi, fusion +2 more +4 moremount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4...6.3 Medium
- wiresharkThe snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4...4.3 Medium
- wiresharkWireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to...4.3 Medium
- wiresharkThe dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark...4.3 Medium
- wiresharkThe bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows...4.3 Medium
- postrev post revolutionMultiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and...6.8 Medium
- postrev post revolutionMultiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8...4.3 Medium
- postrev post revolutioncommon.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of...5.0 Medium
- plonePlone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts5.5 Medium
- plonePlone Cross-site Scripting vulnerability3.5 Low
- ploneCross-site scripting in Products.CMFPlone and Products.PasswordResetTool4.3 Medium
- vmware esx, esxi, fusion +2 more +4 moreRace condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation...6.9 Medium
- gimpMultiple integer overflows in the load_image function in file-pcx.c in the Personal Computer...6.8 Medium
- imperva securesphere web application firewallCross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in...4.3 Medium
- mozilla firefoxThe X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not...4.3 Medium
- xmlsoft libxml, libxml2 +1 moreInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...9.3 High
- maynard johnson oprofileutils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection...7.2 High
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop...4.3 Medium
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly...4.3 Medium
- linux kernelThe ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not...7.2 High
- hp intelligent management centerInteger overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to...10.0 High
- ibm tivoli management frameworkTivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an...9.0 High
- apache rampart\/cThe rampart_timestamp_token_validate function in util/rampart_timestamp_token.c in Apache Rampart...6.5 Medium
- hp loadrunnerBuffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon...6.8 Medium
- cisco anyconnect secure mobility clientThe Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly...7.2 High
- cisco cns network registrarCisco Network Registrar before 7.2 has a default administrative password, which makes it easier...10.0 High
- cisco skinny client control protocol software, unified ip phone 7906, unified ip phone 7911g +12 more +14 moreCisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly...1.5 Low
- cisco media processing software, media experience engine 5600 +1 moreCisco Media Processing Software before 1.2 on Media Experience Engine (MXE) 5600 devices has a...10.0 High
- cisco skinny client control protocol software, unified ip phone 7906, unified ip phone 7911g +12 more +14 moreCisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local...6.6 Medium
- cisco skinny client control protocol software, unified ip phone 7906, unified ip phone 7911g +12 more +14 moreThe su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0...6.6 Medium
- ibm tivoli management frameworkStack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7...9.0 High
- apache archivaMultiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3...4.3 Medium
- apache archivaMultiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2,...6.8 Medium
- cisco anyconnect secure mobility clientThe helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client...9.3 High
- cisco anyconnect secure mobility clientThe helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client...7.6 High
- fetchmailfetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS...5.0 Medium
- eucalyptus, canonical ubuntu linux +1 moreEucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC)...6.5 Medium
- apache subversionThe mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and...4.3 Medium
- apache subversion, apple mac os x, canonical ubuntu linux +2 more +4 moreThe mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and...4.3 Medium
- Show moreLoading…