# CVEs published 2011-08-18 30 CVEs were published on August 18, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-2733](https://cve.now/CVE-2011-2733.md): EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of auth (no CVSS) - [CVE-2011-2945](https://cve.now/CVE-2011-2945.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows (no CVSS) - [CVE-2011-2946](https://cve.now/CVE-2011-2946.md): Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 th (no CVSS) - [CVE-2011-2947](https://cve.now/CVE-2011-2947.md): Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 (no CVSS) - [CVE-2011-2948](https://cve.now/CVE-2011-2948.md): RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1. (no CVSS) - [CVE-2011-2949](https://cve.now/CVE-2011-2949.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Real (no CVSS) - [CVE-2011-2950](https://cve.now/CVE-2011-2950.md): Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 th (no CVSS) - [CVE-2011-2951](https://cve.now/CVE-2011-2951.md): Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer (no CVSS) - [CVE-2011-2952](https://cve.now/CVE-2011-2952.md): Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Re (no CVSS) - [CVE-2011-2953](https://cve.now/CVE-2011-2953.md): An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1 (no CVSS) - [CVE-2011-2954](https://cve.now/CVE-2011-2954.md): Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer (no CVSS) - [CVE-2011-2955](https://cve.now/CVE-2011-2955.md): Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Re (no CVSS) - [CVE-2011-0084](https://cve.now/CVE-2011-0084.md): The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and othe (no CVSS) - [CVE-2011-1624](https://cve.now/CVE-2011-1624.md): Cisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a denial of service (device reload) by establishin (no CVSS) - [CVE-2011-1625](https://cve.now/CVE-2011-1625.md): Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a de (no CVSS) - [CVE-2011-2378](https://cve.now/CVE-2011-2378.md): The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does no (no CVSS) - [CVE-2011-2980](https://cve.now/CVE-2011-2980.md): Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, (no CVSS) - [CVE-2011-2981](https://cve.now/CVE-2011-2981.md): The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other produ (no CVSS) - [CVE-2011-2982](https://cve.now/CVE-2011-2982.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonke (no CVSS) - [CVE-2011-2983](https://cve.now/CVE-2011-2983.md): Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly h (no CVSS) - [CVE-2011-2984](https://cve.now/CVE-2011-2984.md): Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the droppi (no CVSS) - [CVE-2011-2985](https://cve.now/CVE-2011-2985.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, (no CVSS) - [CVE-2011-2986](https://cve.now/CVE-2011-2986.md): Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API (no CVSS) - [CVE-2011-2987](https://cve.now/CVE-2011-2987.md): Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x throug (no CVSS) - [CVE-2011-2988](https://cve.now/CVE-2011-2988.md): Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, Se (no CVSS) - [CVE-2011-2989](https://cve.now/CVE-2011-2989.md): The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not pr (no CVSS) - [CVE-2011-2990](https://cve.now/CVE-2011-2990.md): The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possib (no CVSS) - [CVE-2011-2991](https://cve.now/CVE-2011-2991.md): The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not pr (no CVSS) - [CVE-2011-2992](https://cve.now/CVE-2011-2992.md): The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other pr (no CVSS) - [CVE-2011-2993](https://cve.now/CVE-2011-2993.md): The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other produc (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-08-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.