# CVEs published 2011-07-28

13 CVEs were published on July 28, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2492](https://cve.now/CVE-2011-2492.md): The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to (no CVSS)
- [CVE-2011-2546](https://cve.now/CVE-2011-2546.md): SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 all (no CVSS)
- [CVE-2011-2547](https://cve.now/CVE-2011-2547.md): The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users (no CVSS)
- [CVE-2011-2549](https://cve.now/CVE-2011-2549.md): Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote a (no CVSS)
- [CVE-2011-2667](https://cve.now/CVE-2011-2667.md): Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly (no CVSS)
- [CVE-2011-2689](https://cve.now/CVE-2011-2689.md): The gfs2\_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a mu (no CVSS)
- [CVE-2011-2695](https://cve.now/CVE-2011-2695.md): Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG\_ON a (no CVSS)
- [CVE-2011-1339](https://cve.now/CVE-2011-1339.md): Cross-site scripting (XSS) vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2011-2688](https://cve.now/CVE-2011-2688.md): SQL injection vulnerability in mysql/mysql-auth.pl in the mod\_authnz\_external module 3.2.5 and earlier for the Apache HTTP Server allows rem (no CVSS)
- [CVE-2011-2747](https://cve.now/CVE-2011-2747.md): Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute a (no CVSS)
- [CVE-2011-2956](https://cve.now/CVE-2011-2956.md): AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a d (no CVSS)
- [CVE-2011-2957](https://cve.now/CVE-2011-2957.md): Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arb (no CVSS)
- [CVE-2011-2958](https://cve.now/CVE-2011-2958.md): Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.