Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2011

20 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2011-1865
    67This week

    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to

    CriticalCVSS 10.0WeaponizedEPSS 88%

    hp · openview storage data protectorJul 1, 2011

  • CVE-2011-1866
    46Plan

    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execu

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    hp · openview storage data protectorJul 1, 2011

  • CVE-2011-2628
    44Plan

    Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    opera · opera browserJul 1, 2011

  • CVE-2011-2464
    26Monitor

    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers

    MediumCVSS 5.0No exploitEPSS 19%

    isc · bindJul 8, 2011

  • CVE-2011-1867
    48Plan

    Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (

    CriticalCVSS 10.0No exploitEPSS 25%

    hp · endpoint admission defenseJul 11, 2011

  • CVE-2011-2220
    45Plan

    Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other produ

    CriticalCVSS 10.0No exploitEPSS 16%

    novell · file reporter engineJul 14, 2011

  • CVE-2011-2505
    29Monitor

    libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 as

    MediumCVSS 6.4Proof of conceptEPSS 12%

    phpmyadmin · phpmyadminJul 14, 2011

  • CVE-2011-2750
    40Plan

    NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPE

    MediumCVSS 5.0WeaponizedEPSS 16%

    novell · file reporterJul 17, 2011

  • CVE-2011-2755
    29Monitor

    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read

    MediumCVSS 5.0Proof of conceptEPSS 30%

    manageengine · servicedesk plusJul 17, 2011

  • CVE-2011-2757
    40Plan

    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read

    MediumCVSS 5.0WeaponizedEPSS 39%

    manageengine · servicedesk plusJul 17, 2011

  • CVE-2011-2780
    24Monitor

    Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 12%

    chyrp · chyrpJul 19, 2011

  • CVE-2011-1511
    29Monitor

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to e

    MediumCVSS 6.4Proof of conceptEPSS 14%

    oracle · sun products suiteJul 20, 2011

  • CVE-2011-2264
    26Monitor

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-depen

    MediumCVSS 4.4No exploitEPSS 31%

    oracle · fusion middlewareJul 20, 2011

  • CVE-2011-0222
    43Plan

    WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt

    CriticalCVSS 9.3Proof of conceptEPSS 21%

    apple · safariJul 21, 2011

  • CVE-2011-1774
    48Plan

    WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and con

    HighCVSS 8.8WeaponizedEPSS 43%

    apple · safariJul 21, 2011

  • CVE-2011-2882
    54Plan

    Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1

    CriticalCVSS 9.3WeaponizedEPSS 56%

    citrix · access gatewayJul 21, 2011

  • CVE-2011-2667
    45Plan

    Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly

    CriticalCVSS 10.0No exploitEPSS 16%

    ca · gateway securityJul 28, 2011

  • CVE-2011-2960
    45Plan

    Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    sunwayland · forcecontrolJul 29, 2011

  • CVE-2011-2522
    30Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remo

    MediumCVSS 6.8Proof of conceptEPSS 10%

    samba · sambaJul 29, 2011

  • CVE-2011-2697
    30Monitor

    foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *Foomatic

    MediumCVSS 6.8No exploitEPSS 10%

    hp · linux imaging and printing projectJul 29, 2011