# CVEs published 2011-08-15

13 CVEs were published on August 15, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0256](https://cve.now/CVE-2011-0256.md): Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application c (no CVSS)
- [CVE-2011-0257](https://cve.now/CVE-2011-0257.md): Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appli (no CVSS)
- [CVE-2011-2424](https://cve.now/CVE-2011-2424.md): Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o (no CVSS)
- [CVE-2011-2481](https://cve.now/CVE-2011-2481.md): Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local user (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-2729](https://cve.now/CVE-2011-2729.md): native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 throug (no CVSS)
- [CVE-2011-2748](https://cve.now/CVE-2011-2748.md): The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a (no CVSS)
- [CVE-2011-2749](https://cve.now/CVE-2011-2749.md): The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a (no CVSS)
- [CVE-2011-3140](https://cve.now/CVE-2011-3140.md): IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly (no CVSS)
- [CVE-2011-0527](https://cve.now/CVE-2011-0527.md): VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords (no CVSS)
- [CVE-2011-0550](https://cve.now/CVE-2011-0550.md): Multiple cross-site scripting (XSS) vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (no CVSS)
- [CVE-2011-0551](https://cve.now/CVE-2011-0551.md): Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP (no CVSS)
- [CVE-2011-2907](https://cve.now/CVE-2011-2907.md): Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-base (no CVSS)
- [CVE-2011-3011](https://cve.now/CVE-2011-3011.md): BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and con (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.