Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
August

CVEs published in August 2011

303 vulnerabilities, 86 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before...CVE-2011-299110.0 HighAugust 18, 2011
mozilla firefox, seamonkey +1 moreThe implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x...CVE-2011-29905.0 MediumAugust 18, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before...CVE-2011-298910.0 HighAugust 18, 2011
mozilla firefox, seamonkey, thunderbird +2 moreBuffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla...CVE-2011-298810.0 HighAugust 18, 2011
mozilla firefox, seamonkey, thunderbird +2 moreHeap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL...CVE-2011-298710.0 HighAugust 18, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other...CVE-2011-29865.0 MediumAugust 18, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5,...CVE-2011-298510.0 HighAugust 18, 2011
mozilla firefox, thunderbird +1 moreUntrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox...CVE-2011-29807.2 HighAugust 18, 2011
cisco iosCisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is...CVE-2011-16255.4 MediumAugust 18, 2011
cisco iosCisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a...CVE-2011-16247.8 HighAugust 18, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other...CVE-2011-298410.0 HighAugust 17, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and...CVE-2011-29834.3 MediumAugust 17, 2011
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20,...CVE-2011-298210.0 HighAugust 17, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird...CVE-2011-29819.3 HighAugust 17, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12,...CVE-2011-237810.0 HighAugust 17, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x...CVE-2011-008410.0 HighAugust 17, 2011
aveva clearscada, schneider-electric scx 67, scx 68 +2 moreCross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009...CVE-2011-31444.3 MediumAugust 16, 2011
aveva clearscada, schneider-electric scx 67, scx 68 +2 moreUse-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3...CVE-2011-314310.0 HighAugust 16, 2011
wellintech kingviewStack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and...CVE-2011-3142Public exploitEPSS 38.4%10.0 HighAugust 16, 2011
invensys wonderware inbatchBuffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1...CVE-2011-31419.3 HighAugust 16, 2011
ibm gx4004 ips-gx4004-ib-2 appliance, web application firewall, g400 ips-g400-ib-1 appliance +2 moreIBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2...CVE-2011-31405.0 MediumAugust 15, 2011
apache tomcat, commons daemon +1 morenative/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache...CVE-2011-2729Fix available5.0 MediumAugust 15, 2011
apache tomcatApache Tomcat Allows Replacing of XML ParserCVE-2011-2481Fix available4.6 MediumAugust 15, 2011
adobe air, flash player +1 moreAdobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186...CVE-2011-24249.3 HighAugust 15, 2011
apple quicktimeInteger signedness error in Apple QuickTime before 7.7 allows remote attackers to execute...CVE-2011-0257Public exploitEPSS 60.1%9.3 HighAugust 15, 2011
apple quicktimeInteger overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code...CVE-2011-02569.3 HighAugust 15, 2011
ca arcserve d2dBaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows...CVE-2011-3011Public exploitEPSS 71.6%5.0 MediumAugust 15, 2011
clusterresources torque resource managerTerascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier...CVE-2011-29077.5 HighAugust 15, 2011
symantec endpoint protectionCross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection...CVE-2011-05516.8 MediumAugust 15, 2011
symantec endpoint protectionMultiple cross-site scripting (XSS) vulnerabilities in the Web Interface in the Endpoint...CVE-2011-05504.3 MediumAugust 15, 2011
vmware tc serverVMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before...CVE-2011-05275.0 MediumAugust 15, 2011
google androidCross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3...CVE-2011-2357Public exploit4.3 MediumAugust 12, 2011
citrix xenXen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that...CVE-2011-1898Fix available7.4 HighAugust 12, 2011
citrix xenMultiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1...CVE-2011-1583Fix available6.9 MediumAugust 12, 2011
ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreThe LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0...CVE-2011-31385.0 MediumAugust 12, 2011
ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreUnspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager ...CVE-2011-313710.0 HighAugust 12, 2011
ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreUnspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager ...CVE-2011-313610.0 HighAugust 12, 2011
ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreUnspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0...CVE-2011-313510.0 HighAugust 12, 2011
ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID...CVE-2009-50852.6 LowAugust 12, 2011
ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim...CVE-2009-50841.9 LowAugust 12, 2011
ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID...CVE-2009-50836.8 MediumAugust 12, 2011
ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x...CVE-2008-72995.0 MediumAugust 12, 2011
freebsd, freetype, netbsd +2 more +4 moreThe LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org...CVE-2011-2895Fix available9.3 HighAugust 12, 2011
adobe shockwave playermsvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute...CVE-2011-242310.0 HighAugust 11, 2011
adobe shockwave playerTextra.x32 in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute...CVE-2011-242210.0 HighAugust 11, 2011
adobe shockwave playerDirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code...CVE-2011-24219.3 HighAugust 11, 2011
adobe shockwave playerAdobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or...CVE-2011-242010.0 HighAugust 11, 2011
adobe shockwave playerIML32.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute...CVE-2011-241910.0 HighAugust 11, 2011
hp palm webosCross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before...CVE-2011-24094.3 MediumAugust 11, 2011
hp palm webosCross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before...CVE-2011-24084.3 MediumAugust 11, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open