# CVEs published 2011-08-09

23 CVEs were published on August 9, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2221](https://cve.now/CVE-2011-2221.md): The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authenticati (no CVSS)
- [CVE-2011-2222](https://cve.now/CVE-2011-2222.md): Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows re (no CVSS)
- [CVE-2011-2223](https://cve.now/CVE-2011-2223.md): The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allow (no CVSS)
- [CVE-2011-2224](https://cve.now/CVE-2011-2224.md): The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie head (no CVSS)
- [CVE-2011-2589](https://cve.now/CVE-2011-2589.md): Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote (no CVSS)
- [CVE-2011-2590](https://cve.now/CVE-2011-2590.md): The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via (no CVSS)
- [CVE-2011-3013](https://cve.now/CVE-2011-3013.md): WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it e (no CVSS)
- [CVE-2011-3014](https://cve.now/CVE-2011-3014.md): The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, (no CVSS)
- [CVE-2011-3012](https://cve.now/CVE-2011-3012.md): The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous (no CVSS)
- [CVE-2008-7292](https://cve.now/CVE-2008-7292.md): Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with u (no CVSS)
- [CVE-2008-7293](https://cve.now/CVE-2008-7293.md): Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle att (no CVSS)
- [CVE-2008-7294](https://cve.now/CVE-2008-7294.md): Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-midd (no CVSS)
- [CVE-2008-7295](https://cve.now/CVE-2008-7295.md): Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle (no CVSS)
- [CVE-2008-7296](https://cve.now/CVE-2008-7296.md): Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to ov (no CVSS)
- [CVE-2008-7297](https://cve.now/CVE-2008-7297.md): Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite (no CVSS)
- [CVE-2008-7298](https://cve.now/CVE-2008-7298.md): The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-midd (no CVSS)
- [CVE-2011-2379](https://cve.now/CVE-2011-2379.md): Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6 (no CVSS)
- [CVE-2011-2380](https://cve.now/CVE-2011-2380.md): Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x be (no CVSS)
- [CVE-2011-2381](https://cve.now/CVE-2011-2381.md): CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, (no CVSS)
- [CVE-2011-2976](https://cve.now/CVE-2011-2976.md): Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote atta (no CVSS)
- [CVE-2011-2977](https://cve.now/CVE-2011-2977.md): Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated wit (no CVSS)
- [CVE-2011-2978](https://cve.now/CVE-2011-2978.md): Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x b (no CVSS)
- [CVE-2011-2979](https://cve.now/CVE-2011-2979.md): Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-08-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.