# CVEs published 2011-06-06 23 CVEs were published on June 6, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0082](https://cve.now/CVE-2011-0082.md): The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement single-session security… (no CVSS) - [CVE-2011-0767](https://cve.now/CVE-2011-0767.md): Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application… (no CVSS) - [CVE-2011-1178](https://cve.now/CVE-2011-1178.md): Multiple integer overflows in the load\_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and… (no CVSS) - [CVE-2011-1752](https://cve.now/CVE-2011-1752.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a… (no CVSS) - [CVE-2011-1783](https://cve.now/CVE-2011-1783.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the… (no CVSS) - [CVE-2011-1787](https://cve.now/CVE-2011-1787.md): Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x… (no CVSS) - [CVE-2011-1921](https://cve.now/CVE-2011-1921.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the… (no CVSS) - [CVE-2011-1948](https://cve.now/CVE-2011-1948.md): Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a… (no CVSS, products-cmfplone · plone +1) - [CVE-2011-1949](https://cve.now/CVE-2011-1949.md): Cross-site scripting (XSS) vulnerability in the safe\_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote… (no CVSS, plone) - [CVE-2011-1950](https://cve.now/CVE-2011-1950.md): plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified… (no CVSS, plone · plone-app-users) - [CVE-2011-1952](https://cve.now/CVE-2011-1952.md): common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML… (no CVSS) - [CVE-2011-1953](https://cve.now/CVE-2011-1953.md): Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject… (no CVSS) - [CVE-2011-1954](https://cve.now/CVE-2011-1954.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the… (no CVSS) - [CVE-2011-1956](https://cve.now/CVE-2011-1956.md): The bytes\_repr\_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of… (no CVSS) - [CVE-2011-1957](https://cve.now/CVE-2011-1957.md): The dissect\_dcm\_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before… (no CVSS) - [CVE-2011-1958](https://cve.now/CVE-2011-1958.md): Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer… (no CVSS) - [CVE-2011-1959](https://cve.now/CVE-2011-1959.md): The snoop\_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain… (no CVSS) - [CVE-2011-2145](https://cve.now/CVE-2011-2145.md): mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4… (no CVSS) - [CVE-2011-2146](https://cve.now/CVE-2011-2146.md): mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4… (no CVSS) - [CVE-2011-2174](https://cve.now/CVE-2011-2174.md): Double free vulnerability in the tvb\_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows… (no CVSS) - [CVE-2011-2175](https://cve.now/CVE-2011-2175.md): Integer underflow in the visual\_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote… (no CVSS) - [CVE-2011-2216](https://cve.now/CVE-2011-2216.md): reqresp\_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows… (no CVSS) - [CVE-2011-2217](https://cve.now/CVE-2011-2217.md): Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2011-06-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.