# CVEs published 2011-09-02 19 CVEs were published on September 2, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0311](https://cve.now/CVE-2011-0311.md): The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10 (no CVSS) - [CVE-2011-0541](https://cve.now/CVE-2011-0541.md): fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories (no CVSS) - [CVE-2011-0542](https://cve.now/CVE-2011-0542.md): fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount (no CVSS) - [CVE-2011-0543](https://cve.now/CVE-2011-0543.md): Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows (no CVSS) - [CVE-2011-1411](https://cve.now/CVE-2011-1411.md): Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and b (no CVSS, org.opensaml:opensaml) - [CVE-2011-2176](https://cve.now/CVE-2011-2176.md): GNOME NetworkManager before 0.8.6 does not properly enforce the auth\_admin element in PolicyKit, which allows local users to bypass intended (no CVSS) - [CVE-2011-3386](https://cve.now/CVE-2011-3386.md): Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery (no CVSS) - [CVE-2011-3387](https://cve.now/CVE-2011-3387.md): The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an in (no CVSS) - [CVE-2009-5086](https://cve.now/CVE-2009-5086.md): Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allow (no CVSS) - [CVE-2011-3385](https://cve.now/CVE-2011-3385.md): Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers (no CVSS) - [CVE-2011-0342](https://cve.now/CVE-2011-0342.md): Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01 (no CVSS) - [CVE-2011-1944](https://cve.now/CVE-2011-1944.md): Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent (no CVSS) - [CVE-2011-2594](https://cve.now/CVE-2011-2594.md): Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a play (no CVSS) - [CVE-2011-2762](https://cve.now/CVE-2011-2762.md): The web interface on the LifeSize Room appliance LS\_RM1\_3.5.3 (11) allows remote attackers to bypass authentication via unspecified data ass (no CVSS) - [CVE-2011-2763](https://cve.now/CVE-2011-2763.md): The web interface on the LifeSize Room appliance LS\_RM1\_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a mo (no CVSS) - [CVE-2011-2903](https://cve.now/CVE-2011-2903.md): Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. (no CVSS) - [CVE-2011-3132](https://cve.now/CVE-2011-3132.md): Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x befo (no CVSS) - [CVE-2011-3133](https://cve.now/CVE-2011-3133.md): Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, (no CVSS) - [CVE-2011-3134](https://cve.now/CVE-2011-3134.md): Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and S (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-09-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.