# CVEs published 2011-06-30 33 CVEs were published on June 30, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0083](https://cve.now/CVE-2011-0083.md): Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox bef (no CVSS) - [CVE-2011-0085](https://cve.now/CVE-2011-0085.md): Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonk (no CVSS) - [CVE-2011-2362](https://cve.now/CVE-2011-2362.md): Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain nam (no CVSS) - [CVE-2011-2363](https://cve.now/CVE-2011-2363.md): Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox bef (no CVSS) - [CVE-2011-2364](https://cve.now/CVE-2011-2364.md): Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers (no CVSS) - [CVE-2011-2365](https://cve.now/CVE-2011-2365.md): Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers (no CVSS) - [CVE-2011-2367](https://cve.now/CVE-2011-2367.md): The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to o (no CVSS) - [CVE-2011-2368](https://cve.now/CVE-2011-2368.md): The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to (no CVSS) - [CVE-2011-2369](https://cve.now/CVE-2011-2369.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2011-2370](https://cve.now/CVE-2011-2370.md): Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger (no CVSS) - [CVE-2011-2371](https://cve.now/CVE-2011-2371.md): Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaM (no CVSS) - [CVE-2011-2373](https://cve.now/CVE-2011-2373.md): Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 (no CVSS) - [CVE-2011-2374](https://cve.now/CVE-2011-2374.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3. (no CVSS) - [CVE-2011-2375](https://cve.now/CVE-2011-2375.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attacke (no CVSS) - [CVE-2011-2376](https://cve.now/CVE-2011-2376.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attac (no CVSS) - [CVE-2011-2377](https://cve.now/CVE-2011-2377.md): Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause (no CVSS) - [CVE-2011-2605](https://cve.now/CVE-2011-2605.md): CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firef (no CVSS) - [CVE-2011-2606](https://cve.now/CVE-2011-2606.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary we (no CVSS) - [CVE-2011-2607](https://cve.now/CVE-2011-2607.md): Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2009-5078](https://cve.now/CVE-2009-5078.md): contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows re (no CVSS) - [CVE-2009-5079](https://cve.now/CVE-2009-5079.md): The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow loc (no CVSS) - [CVE-2009-5080](https://cve.now/CVE-2009-5080.md): The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (a (no CVSS) - [CVE-2009-5081](https://cve.now/CVE-2009-5081.md): The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and e (no CVSS) - [CVE-2009-5082](https://cve.now/CVE-2009-5082.md): The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/\*/Linux (aka Owl) improperly create temporary (no CVSS) - [CVE-2011-2197](https://cve.now/CVE-2011-2197.md): The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does no (no CVSS, actionpack ยท activesupport) - [CVE-2011-2366](https://cve.now/CVE-2011-2366.md): Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL te (no CVSS) - [CVE-2011-2598](https://cve.now/CVE-2011-2598.md): The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applicatio (no CVSS) - [CVE-2011-2599](https://cve.now/CVE-2011-2599.md): Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies o (no CVSS) - [CVE-2011-2600](https://cve.now/CVE-2011-2600.md): The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of se (no CVSS) - [CVE-2011-2601](https://cve.now/CVE-2011-2601.md): The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2011-2602](https://cve.now/CVE-2011-2602.md): The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a craft (no CVSS) - [CVE-2011-2603](https://cve.now/CVE-2011-2603.md): The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page (no CVSS) - [CVE-2011-2604](https://cve.now/CVE-2011-2604.md): The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web pa (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-06-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.