CVEs published in July 2011

311 vulnerabilities, 51 critical, 0 exploited.

• linuxfoundation foomatic foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to... CVE-2011-2964 Fix available 6.8 MediumJuly 29, 2011
• hp linux imaging and printing project foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to... CVE-2011-2697 Fix available EPSS 10.8% 6.8 MediumJuly 29, 2011
• samba, canonical ubuntu linux, debian linux +2 more Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba... CVE-2011-2694 Fix available 2.6 LowJuly 29, 2011
• samba, canonical ubuntu linux, debian linux +2 more Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool ... CVE-2011-2522 Public exploitFix available EPSS 10.6% 6.8 MediumJuly 29, 2011
• hp sitescope Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to... CVE-2011-2401 8.3 HighJuly 29, 2011
• hp sitescope Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote... CVE-2011-2400 4.3 MediumJuly 29, 2011
• progea movicon TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for... CVE-2011-2963 Public exploit 10.0 HighJuly 29, 2011
• invensys wonderware information server Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0... CVE-2011-2962 9.3 HighJuly 29, 2011
• sunwayland pnetpower Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote... CVE-2011-2961 10.0 HighJuly 29, 2011
• sunwayland forcecontrol Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3... CVE-2011-2960 Public exploit EPSS 17.6% 10.0 HighJuly 29, 2011
• 7t igss Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in... CVE-2011-2959 10.0 HighJuly 29, 2011
• broadcom total defense, ca gateway security +1 more Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69... CVE-2011-2667 EPSS 16.2% 10.0 HighJuly 28, 2011
• cisco ios xr, asr 9006 router, asr 9010 router +2 more Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services... CVE-2011-2549 7.8 HighJuly 28, 2011
• cisco sa500 software, sa520, sa520w +1 more +3 more The web-based management interface on Cisco SA 500 series security appliances with software... CVE-2011-2547 9.0 HighJuly 28, 2011
• cisco sa500 software, sa520, sa520w +1 more +3 more SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security... CVE-2011-2546 5.0 MediumJuly 28, 2011
• ecava integraxor Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080)... CVE-2011-2958 4.3 MediumJuly 28, 2011
• rockwellautomation factorytalk diagnostics viewer Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 ... CVE-2011-2957 6.9 MediumJuly 28, 2011
• azeotech daqfactory AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals,... CVE-2011-2956 Public exploit 7.8 HighJuly 28, 2011
• google picasa Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images,... CVE-2011-2747 9.3 HighJuly 28, 2011
• google search appliance Cross-site scripting (XSS) vulnerability in Google Search Appliance before 5.0 allows remote... CVE-2011-1339 4.3 MediumJuly 28, 2011
• linux kernel Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local... CVE-2011-2695 Fix available 4.9 MediumJuly 28, 2011
• linux kernel, redhat enterprise linux desktop, enterprise linux server +1 more +3 more The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure... CVE-2011-2689 Fix available 4.9 MediumJuly 28, 2011
• linux kernel, redhat enterprise linux aus, enterprise linux desktop +3 more +5 more The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain... CVE-2011-2492 Fix available 1.9 LowJuly 28, 2011
• ibm lotus symphony The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to... CVE-2011-2893 4.3 MediumJuly 27, 2011
• joomla joomla\! Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML... CVE-2011-2892 4.3 MediumJuly 27, 2011
• joomla joomla\! Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty... CVE-2011-2891 5.0 MediumJuly 27, 2011
• joomla joomla\! The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in... CVE-2011-2890 5.0 MediumJuly 27, 2011
• joomla joomla\! templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain... CVE-2011-2889 5.0 MediumJuly 27, 2011
• ibm lotus symphony IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application... CVE-2011-2888 4.3 MediumJuly 27, 2011
• ibm lotus symphony IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service ... CVE-2011-2887 4.3 MediumJuly 27, 2011
• ibm lotus symphony IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application... CVE-2011-2886 4.3 MediumJuly 27, 2011
• ibm lotus symphony IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application... CVE-2011-2885 4.3 MediumJuly 27, 2011
• ibm lotus symphony Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and... CVE-2011-2884 10.0 HighJuly 27, 2011
• joomla joomla\! Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote... CVE-2011-2710 4.3 MediumJuly 27, 2011
• joomla joomla\! Joomla! vulnerable to Cross-site Scripting CVE-2011-2509 Fix available 4.3 MediumJuly 27, 2011
• joomla joomla\! Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain... CVE-2011-2488 5.0 MediumJuly 27, 2011
• chyrp upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side... CVE-2011-2745 Public exploit 6.5 MediumJuly 27, 2011
• mega-nerd libsndfile Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service... CVE-2011-2696 Fix available 6.8 MediumJuly 27, 2011
• drupal Drupal Access Control Bypass CVE-2011-2687 Fix available 7.5 HighJuly 27, 2011
• videolan vlc media player Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in... CVE-2011-2588 Fix available 6.8 MediumJuly 27, 2011
• videolan vlc media player Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in... CVE-2011-2587 Fix available 6.8 MediumJuly 27, 2011
• likewise open SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise... CVE-2011-2467 5.8 MediumJuly 27, 2011
• redhat jboss enterprise application platform, jboss enterprise soa platform, jboss enterprise web platform +1 more +3 more jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss... CVE-2011-2196 Fix available 6.8 MediumJuly 27, 2011
• fabfile fabric Fabric vulnerable to symlink attack on tmp files CVE-2011-2185 Fix available 4.4 MediumJuly 27, 2011
• canonical ubuntu linux, debian advanced package tool +1 more APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the... CVE-2011-1829 Fix available 4.3 MediumJuly 27, 2011
• redhat spacewalk-java, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery CVE-2009-4139 Fix available 6.8 MediumJuly 27, 2011
• gimp Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro ... CVE-2011-1782 Fix available 7.5 HighJuly 27, 2011
• redhat jboss enterprise application platform, jboss enterprise soa platform, jboss seam 2 framework +2 more jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss... CVE-2011-1484 Fix available 6.8 MediumJuly 27, 2011
• phpmyadmin libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4... CVE-2011-2719 Fix available 6.4 MediumJuly 26, 2011
• osgeo mapserver Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote... CVE-2011-2704 Fix available 7.5 HighJuly 26, 2011
• Show olderLoading…