CVEs published in June 2011
301 vulnerabilities, 106 critical, 2 exploited.
- apple mac os x, mac os x server +1 moreThe IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause...4.9 Medium
- apple mac os x, quicktime +1 moreBuffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute...6.8 Medium
- apple mac os x serverservermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and...6.4 Medium
- apple mac os x, quicktime +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute...6.8 Medium
- apple mac os x, quicktime +1 moreQuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or...6.8 Medium
- apple mac os x, quicktime +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute...6.8 Medium
- apple mac os x, mac os x server +1 moreQuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code...6.8 Medium
- apple mac os x, mac os x server +1 moreThe MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail...5.0 Medium
- apple mac os x, mac os x server +1 moreBuffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8...7.5 High
- apple imageio, mac os x, mac os x server +2 moreHeap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to...6.8 Medium
- apple imageio, mac os x, mac os x server +2 moreHeap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to...6.8 Medium
- apple mac os x serverAbsolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X...5.0 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to...6.8 Medium
- apple mac os x, mac os x server +1 moreOff-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context...7.5 High
- apple mac os x, mac os x server +1 moreInteger overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute...6.8 Medium
- apple mac os x, mac os x server +1 moreThe Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL...5.9 Medium
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows...6.8 Medium
- apple mac os x, mac os x server +1 moreApp Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID...2.1 Low
- apple mac os x, mac os x server +1 moreAirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of...7.8 High
- gnu groff, apple mac os x +1 morecontrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite...3.3 Low
- linux kernelThe add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does...4.9 Medium
- haxx libcurl, apple mac os x, canonical ubuntu linux +2 more +4 moreThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used...4.3 Medium
- linux kernelBuffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the...7.8 High
- freedesktop dbusThe configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite...3.3 Low
- brad fitzpatrick djabberdXMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files,...5.5 Medium
- d-bus project d-bus, freedesktop dbus +1 moreThe _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2...4.6 Medium
- kbs weblygoCross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04...4.3 Medium
- prosodyThe json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote...5.0 Medium
- prosodyProsody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value...4.3 Medium
- rockwellautomation eds hardware installation tool, rslinx +1 moreBuffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and...9.3 High
- prosodyProsody before 0.8.1 does not properly detect recursion during entity expansion, which allows...5.0 Medium
- matthewwild luaexpatLuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows...5.0 Medium
- brad fitzpatrick djabberdDJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which...5.0 Medium
- jabberd2, apple mac os x, mac os x server +1 more +3 morejabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows...7.5 High
- phpnuke php-nukeMultiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP...6.8 Medium
- phpnuke php-nukeMultiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier...4.3 Medium
- phpnuke php-nukeSQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP...7.5 High
- simplemachines smfThe PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x...5.0 Medium
- simplemachines smfSimple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the...7.5 High
- simplemachines smfCross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple...3.5 Low
- simplemachines smfThe loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x...7.5 High
- simplemachines smfSSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly...10.0 High
- linux kernelThe tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is...5.4 Medium
- linux kernel, redhat enterprise linux aus, enterprise linux desktop +3 more +5 moreThe dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control...7.8 High
- linux kernel, canonical ubuntu linux, vmware esx +2 morenet/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures,...5.5 Medium
- phpThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 Medium
- adobe shockwave playerAdobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a...9.3 High
- adobe shockwave playerAdobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a...9.3 High
- adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary...9.3 High
- adobe shockwave playerBuffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to...9.3 High
- Show moreLoading…