CVEs published in August 2011

303 vulnerabilities, 86 critical, 0 exploited.

• apache tomcat Apache Tomcat Allows Remote Attackers to Spoof AJP Requests CVE-2011-3190 Fix available EPSS 15.2% 7.5 HighAugust 31, 2011
• redhat system-config-printer pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other... CVE-2011-2899 Fix available 5.1 MediumAugust 31, 2011
• cisco telepresence 6000 mxp, telepresence 9000 mxp, telepresence c series software +8 more +10 more Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units,... CVE-2011-2577 Public exploit EPSS 12.7% 7.8 HighAugust 31, 2011
• gnome libsoup Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows... CVE-2011-2524 Fix available 5.0 MediumAugust 31, 2011
• linux kernel, redhat enterprise linux, enterprise virtualization hypervisor +2 more The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise... CVE-2011-1576 Fix available 5.7 MediumAugust 31, 2011
• libpng Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5... CVE-2009-5063 Fix available 5.0 MediumAugust 31, 2011
• libpng Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows... CVE-2006-7244 5.0 MediumAugust 31, 2011
• nss Debian nss - compromised certificate authority DSA-2300-1 Fix available No scoreAugust 31, 2011
• ca-certificates Debian ca-certificates - untrusted root CA DSA-2299-1 Fix available No scoreAugust 31, 2011
• systemtap SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a... CVE-2011-1781 Fix available 1.2 LowAugust 29, 2011
• systemtap SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to... CVE-2011-1769 Fix available 1.2 LowAugust 29, 2011
• cisco telepresence recording server software Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root... CVE-2011-2555 10.0 HighAugust 29, 2011
• apple iphone os The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the... CVE-2011-0228 Public exploit 7.5 HighAugust 29, 2011
• rubyonrails rails actionpack Improper Input Validation vulnerability CVE-2011-3187 Public exploitFix available 4.3 MediumAugust 29, 2011
• rubyonrails rails actionpack CRLF injection vulnerability CVE-2011-3186 Fix available 4.3 MediumAugust 29, 2011
• rubyonrails rails, ruby on rails +1 more activesupport Cross-site Scripting vulnerability CVE-2011-2932 Fix available 4.3 MediumAugust 29, 2011
• rubyonrails rails, ruby on rails +1 more actionpack Cross-site Scripting vulnerability CVE-2011-2931 Fix available 4.3 MediumAugust 29, 2011
• rubyonrails rails, ruby on rails +1 more activerecord vulnerable to SQL Injection CVE-2011-2930 Fix available 7.5 HighAugust 29, 2011
• rubyonrails rails, ruby on rails +1 more actionpack Improper Input Validation vulnerability CVE-2011-2929 Fix available 5.0 MediumAugust 29, 2011
• pidgin gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute... CVE-2011-3185 9.3 HighAugust 29, 2011
• pidgin The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in... CVE-2011-3184 Fix available 4.3 MediumAugust 29, 2011
• phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x... CVE-2011-3181 Fix available 4.3 MediumAugust 29, 2011
• pidgin libpurple, pidgin +1 more The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in... CVE-2011-2943 Fix available 4.3 MediumAugust 29, 2011
• linux kernel The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not... CVE-2011-2928 Fix available 4.9 MediumAugust 29, 2011
• google chrome The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the... CVE-2011-2839 7.5 HighAugust 29, 2011
• google chrome Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers... CVE-2011-2829 7.5 HighAugust 29, 2011
• google chrome Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a... CVE-2011-2828 7.5 HighAugust 29, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to... CVE-2011-2827 7.5 HighAugust 29, 2011
• google chrome Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via... CVE-2011-2826 7.5 HighAugust 29, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to... CVE-2011-2825 9.3 HighAugust 29, 2011
• google chrome Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to... CVE-2011-2824 7.5 HighAugust 29, 2011
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to... CVE-2011-2823 7.5 HighAugust 29, 2011
• google chrome Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command... CVE-2011-2822 10.0 HighAugust 29, 2011
• google chrome, apple iphone os, mac os x +5 more +7 more Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote... CVE-2011-2821 Fix available 7.5 HighAugust 29, 2011
• google chrome Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows... CVE-2011-2806 10.0 HighAugust 29, 2011
• otrs Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket... CVE-2011-2746 Fix available 4.0 MediumAugust 29, 2011
• apache wicket Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when... CVE-2011-2712 2.6 LowAugust 29, 2011
• cisco intercompany media engine, unified communications manager +1 more Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified... CVE-2011-2564 7.8 HighAugust 29, 2011
• cisco intercompany media engine, unified communications manager +1 more Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified... CVE-2011-2563 7.8 HighAugust 29, 2011
• cisco unified communications manager Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager... CVE-2011-2562 7.8 HighAugust 29, 2011
• cisco unified communications manager The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x... CVE-2011-2561 7.1 HighAugust 29, 2011
• cisco unified communications manager The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly... CVE-2011-2560 7.8 HighAugust 29, 2011
• cisco unified communications manager, unified presence server +1 more Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4,... CVE-2011-1643 10.0 HighAugust 29, 2011
• apache http server, canonical ubuntu linux, opensuse +2 more +4 more The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2... CVE-2011-3192 Public exploitFix available EPSS 98.9% 7.8 HighAugust 29, 2011
• linux kernel Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux... CVE-2011-2497 Fix available 8.3 HighAugust 29, 2011
• linux kernel, redhat enterprise linux aus, enterprise linux desktop +3 more +5 more The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does... CVE-2011-2213 Fix available 4.9 MediumAugust 29, 2011
• php Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to... CVE-2011-3268 10.0 HighAugust 25, 2011
• php PHP before 5.3.7 does not properly implement the error_log function, which allows context... CVE-2011-3267 Fix available 5.0 MediumAugust 25, 2011
• php The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt... CVE-2011-3189 4.3 MediumAugust 25, 2011
• php PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc... CVE-2011-3182 Public exploitFix available EPSS 19.2% 5.0 MediumAugust 25, 2011
• Show olderLoading…