# CVEs published 2011-06-29

15 CVEs were published on June 29, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1332](https://cve.now/CVE-2011-1332.md): Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-1333](https://cve.now/CVE-2011-1333.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2011-1334](https://cve.now/CVE-2011-1334.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise bef (no CVSS)
- [CVE-2011-1335](https://cve.now/CVE-2011-1335.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2011-2180](https://cve.now/CVE-2011-2180.md): Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2011-2181](https://cve.now/CVE-2011-2181.md): Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2011-2204](https://cve.now/CVE-2011-2204.md): Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries contai (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-2345](https://cve.now/CVE-2011-2345.md): The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a den (no CVSS)
- [CVE-2011-2346](https://cve.now/CVE-2011-2346.md): Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2347](https://cve.now/CVE-2011-2347.md): Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to ca (no CVSS)
- [CVE-2011-2348](https://cve.now/CVE-2011-2348.md): Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attackers to cause a denial (no CVSS)
- [CVE-2011-2349](https://cve.now/CVE-2011-2349.md): Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2350](https://cve.now/CVE-2011-2350.md): The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attack (no CVSS)
- [CVE-2011-2351](https://cve.now/CVE-2011-2351.md): Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2470](https://cve.now/CVE-2011-2470.md): Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inje (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.