# CVEs published 2011-06-22

13 CVEs were published on June 22, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2533](https://cve.now/CVE-2011-2533.md): The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unsp (no CVSS)
- [CVE-2011-2534](https://cve.now/CVE-2011-2534.md): Buffer overflow in the clusterip\_proc\_write function in net/ipv4/netfilter/ipt\_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow loc (no CVSS)
- [CVE-2011-1170](https://cve.now/CVE-2011-1170.md): net/ipv4/netfilter/arp\_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\\0' character at t (no CVSS)
- [CVE-2011-1171](https://cve.now/CVE-2011-1171.md): net/ipv4/netfilter/ip\_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\\0' character at th (no CVSS)
- [CVE-2011-1172](https://cve.now/CVE-2011-1172.md): net/ipv6/netfilter/ip6\_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\\0' character at t (no CVSS)
- [CVE-2011-1173](https://cve.now/CVE-2011-1173.md): The econet\_sendmsg function in net/econet/af\_econet.c in the Linux kernel before 2.6.39 on the x86\_64 platform allows remote attackers to ob (no CVSS)
- [CVE-2011-1330](https://cve.now/CVE-2011-1330.md): Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attacke (no CVSS)
- [CVE-2011-2200](https://cve.now/CVE-2011-2200.md): The \_dbus\_header\_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1 (no CVSS)
- [CVE-2011-2206](https://cve.now/CVE-2011-2206.md): XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet (no CVSS)
- [CVE-2011-2205](https://cve.now/CVE-2011-2205.md): Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2011-2530](https://cve.now/CVE-2011-2530.md): Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic (no CVSS)
- [CVE-2011-2531](https://cve.now/CVE-2011-2531.md): Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remo (no CVSS)
- [CVE-2011-2532](https://cve.now/CVE-2011-2532.md): The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.