# CVEs published 2011-07-21

65 CVEs were published on July 21, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1383](https://cve.now/CVE-2010-1383.md): CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a (no CVSS)
- [CVE-2010-1420](https://cve.now/CVE-2010-1420.md): Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2011-0214](https://cve.now/CVE-2011-0214.md): CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows (no CVSS)
- [CVE-2011-0215](https://cve.now/CVE-2011-0215.md): ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbit (no CVSS)
- [CVE-2011-0216](https://cve.now/CVE-2011-0216.md): Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap (no CVSS)
- [CVE-2011-0217](https://cve.now/CVE-2011-0217.md): Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers t (no CVSS)
- [CVE-2011-0218](https://cve.now/CVE-2011-0218.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0219](https://cve.now/CVE-2011-0219.md): Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web site (no CVSS)
- [CVE-2011-0221](https://cve.now/CVE-2011-0221.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0222](https://cve.now/CVE-2011-0222.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0223](https://cve.now/CVE-2011-0223.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0225](https://cve.now/CVE-2011-0225.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0232](https://cve.now/CVE-2011-0232.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0233](https://cve.now/CVE-2011-0233.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0234](https://cve.now/CVE-2011-0234.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0235](https://cve.now/CVE-2011-0235.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0237](https://cve.now/CVE-2011-0237.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0238](https://cve.now/CVE-2011-0238.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0240](https://cve.now/CVE-2011-0240.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0241](https://cve.now/CVE-2011-0241.md): Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0242](https://cve.now/CVE-2011-0242.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2011-0244](https://cve.now/CVE-2011-0244.md): WebKit in Apple Safari before 5.0.6 allows user-assisted remote attackers to read arbitrary files via vectors related to improper canonicali (no CVSS)
- [CVE-2011-0253](https://cve.now/CVE-2011-0253.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0254](https://cve.now/CVE-2011-0254.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-0255](https://cve.now/CVE-2011-0255.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-1288](https://cve.now/CVE-2011-1288.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-1453](https://cve.now/CVE-2011-1453.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-1457](https://cve.now/CVE-2011-1457.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-1462](https://cve.now/CVE-2011-1462.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-1774](https://cve.now/CVE-2011-1774.md): WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and con (no CVSS)
- [CVE-2011-1797](https://cve.now/CVE-2011-1797.md): WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2011-2520](https://cve.now/CVE-2011-2520.md): fw\_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI an (no CVSS)
- [CVE-2011-2685](https://cve.now/CVE-2011-2685.md): Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2011-2882](https://cve.now/CVE-2011-2882.md): Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1 (no CVSS)
- [CVE-2011-2883](https://cve.now/CVE-2011-2883.md): The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and (no CVSS)
- [CVE-2011-2264](https://cve.now/CVE-2011-2264.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-depen (no CVSS)
- [CVE-2011-2267](https://cve.now/CVE-2011-2267.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-depen (no CVSS)
- [CVE-2011-2272](https://cve.now/CVE-2011-2272.md): Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.0, Bundle, #36, 9.1, Bundle, and #13 a (no CVSS)
- [CVE-2011-2273](https://cve.now/CVE-2011-2273.md): Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote aut (no CVSS)
- [CVE-2011-2274](https://cve.now/CVE-2011-2274.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 all (no CVSS)
- [CVE-2011-2275](https://cve.now/CVE-2011-2275.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 all (no CVSS)
- [CVE-2011-2277](https://cve.now/CVE-2011-2277.md): Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows (no CVSS)
- [CVE-2011-2278](https://cve.now/CVE-2011-2278.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9, Bundle, #24, 9.0, Bundle, #17, 9.1, (no CVSS)
- [CVE-2011-2279](https://cve.now/CVE-2011-2279.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1, Bundle, and #6 allows remote authen (no CVSS)
- [CVE-2011-2280](https://cve.now/CVE-2011-2280.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 all (no CVSS)
- [CVE-2011-2281](https://cve.now/CVE-2011-2281.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 Update 2011-D allows remote authenti (no CVSS)
- [CVE-2011-2282](https://cve.now/CVE-2011-2282.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50.20 and 8.51.11 allows remote (no CVSS)
- [CVE-2011-2283](https://cve.now/CVE-2011-2283.md): Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows (no CVSS)
- [CVE-2011-2284](https://cve.now/CVE-2011-2284.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle #17 allows remote authenticat (no CVSS)
- [CVE-2011-2285](https://cve.now/CVE-2011-2285.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors (no CVSS)
- [CVE-2011-2287](https://cve.now/CVE-2011-2287.md): Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors rela (no CVSS)
- [CVE-2011-2288](https://cve.now/CVE-2011-2288.md): Unspecified vulnerability in Sun Integrated Lights Out Manager (ILOM) in SysFW 8.1.0.a and earlier for various Oracle SPARC T3, SPARC Netra (no CVSS)
- [CVE-2011-2289](https://cve.now/CVE-2011-2289.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect integrity and availability via unknown vectors related to LiveUp (no CVSS)
- [CVE-2011-2290](https://cve.now/CVE-2011-2290.md): Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows local users to affect availability via unknown vectors related to Kern (no CVSS)
- [CVE-2011-2291](https://cve.now/CVE-2011-2291.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality via unknown vectors related to Trusted Extension (no CVSS)
- [CVE-2011-2293](https://cve.now/CVE-2011-2293.md): Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Zones. (no CVSS)
- [CVE-2011-2294](https://cve.now/CVE-2011-2294.md): Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to SSH. (no CVSS)
- [CVE-2011-2295](https://cve.now/CVE-2011-2295.md): Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to Driver/USB. (no CVSS)
- [CVE-2011-2296](https://cve.now/CVE-2011-2296.md): Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to Kernel/SCTP. (no CVSS)
- [CVE-2011-2297](https://cve.now/CVE-2011-2297.md): Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknow (no CVSS)
- [CVE-2011-2298](https://cve.now/CVE-2011-2298.md): Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to KSSL. (no CVSS)
- [CVE-2011-2299](https://cve.now/CVE-2011-2299.md): Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to a (no CVSS)
- [CVE-2011-2300](https://cve.now/CVE-2011-2300.md): Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integri (no CVSS)
- [CVE-2011-2305](https://cve.now/CVE-2011-2305.md): Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown (no CVSS)
- [CVE-2011-2307](https://cve.now/CVE-2011-2307.md): Unspecified vulnerability in Oracle SysFW 8.1.0.a in various Oracle SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade servers allows remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.