# CVEs published 2011-07-19

12 CVEs were published on July 19, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0226](https://cve.now/CVE-2011-0226.md): Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4. (no CVSS)
- [CVE-2011-0227](https://cve.now/CVE-2011-0227.md): The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, whi (no CVSS)
- [CVE-2011-2743](https://cve.now/CVE-2011-2743.md): Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2011-2779](https://cve.now/CVE-2011-2779.md): Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, wh (no CVSS)
- [CVE-2011-2780](https://cve.now/CVE-2011-2780.md): Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2011-0770](https://cve.now/CVE-2011-0770.md): Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote att (no CVSS)
- [CVE-2011-1355](https://cve.now/CVE-2011-1355.md): Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to (no CVSS)
- [CVE-2011-1356](https://cve.now/CVE-2011-1356.md): IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace inform (no CVSS)
- [CVE-2011-1741](https://cve.now/CVE-2011-1741.md): Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum e (no CVSS)
- [CVE-2011-2385](https://cve.now/CVE-2011-2385.md): The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of th (no CVSS)
- [CVE-2011-2528](https://cve.now/CVE-2011-2528.md): Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) Plone (no CVSS, plone · zope2)
- [CVE-2011-2744](https://cve.now/CVE-2011-2744.md): Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.