# CVEs published 2011-08-05 9 CVEs were published on August 5, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-3009](https://cve.now/CVE-2011-3009.md): Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the val (no CVSS) - [CVE-2011-1340](https://cve.now/CVE-2011-1340.md): Cross-site scripting (XSS) vulnerability in skins/plone\_templates/default\_error\_message.pt in Plone before 2.5.3 allows remote attackers to (no CVSS, plone) - [CVE-2011-2591](https://cve.now/CVE-2011-2591.md): Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted input fields, as dem (no CVSS) - [CVE-2011-2686](https://cve.now/CVE-2011-2686.md): Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the val (no CVSS) - [CVE-2011-2705](https://cve.now/CVE-2011-2705.md): The SecureRandom.random\_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for (no CVSS) - [CVE-2011-2720](https://cve.now/CVE-2011-2720.md): The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attacker (no CVSS) - [CVE-2011-2721](https://cve.now/CVE-2011-2721.md): Off-by-one error in the cli\_hm\_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denia (no CVSS) - [CVE-2011-2900](https://cve.now/CVE-2011-2900.md): Stack-based buffer overflow in the (1) put\_dir function in mongoose.c in Mongoose 3.0, (2) put\_dir function in yasslEWS.c in yaSSL Embedded (no CVSS) - [CVE-2011-3008](https://cve.now/CVE-2011-3008.md): The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Se (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-08-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.