# CVEs published 2011-06-06 23 CVEs were published on June 6, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0082](https://cve.now/CVE-2011-0082.md): The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement single-session security ex (no CVSS) - [CVE-2011-0767](https://cve.now/CVE-2011-0767.md): Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (no CVSS) - [CVE-2011-1178](https://cve.now/CVE-2011-1178.md): Multiple integer overflows in the load\_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier (no CVSS) - [CVE-2011-1752](https://cve.now/CVE-2011-1752.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a den (no CVSS) - [CVE-2011-1783](https://cve.now/CVE-2011-1783.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz (no CVSS) - [CVE-2011-1787](https://cve.now/CVE-2011-1787.md): Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x bef (no CVSS) - [CVE-2011-1921](https://cve.now/CVE-2011-1921.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz (no CVSS) - [CVE-2011-1948](https://cve.now/CVE-2011-1948.md): Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a craft (no CVSS, plone · products-cmfplone +1) - [CVE-2011-1949](https://cve.now/CVE-2011-1949.md): Cross-site scripting (XSS) vulnerability in the safe\_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authent (no CVSS, plone) - [CVE-2011-1950](https://cve.now/CVE-2011-1950.md): plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vector (no CVSS, plone · plone-app-users) - [CVE-2011-1952](https://cve.now/CVE-2011-1952.md): common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup (no CVSS) - [CVE-2011-1953](https://cve.now/CVE-2011-1953.md): Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitr (no CVSS) - [CVE-2011-1954](https://cve.now/CVE-2011-1954.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the auth (no CVSS) - [CVE-2011-1956](https://cve.now/CVE-2011-1956.md): The bytes\_repr\_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of servic (no CVSS) - [CVE-2011-1957](https://cve.now/CVE-2011-1957.md): The dissect\_dcm\_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 (no CVSS) - [CVE-2011-1958](https://cve.now/CVE-2011-1958.md): Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer derefe (no CVSS) - [CVE-2011-1959](https://cve.now/CVE-2011-1959.md): The snoop\_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtuali (no CVSS) - [CVE-2011-2145](https://cve.now/CVE-2011-2145.md): mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware (no CVSS) - [CVE-2011-2146](https://cve.now/CVE-2011-2146.md): mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware (no CVSS) - [CVE-2011-2174](https://cve.now/CVE-2011-2174.md): Double free vulnerability in the tvb\_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows rem (no CVSS) - [CVE-2011-2175](https://cve.now/CVE-2011-2175.md): Integer underflow in the visual\_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote atta (no CVSS) - [CVE-2011-2216](https://cve.now/CVE-2011-2216.md): reqresp\_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows re (no CVSS) - [CVE-2011-2217](https://cve.now/CVE-2011-2217.md): Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Cl (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-06-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.