# CVEs published 2011-10-19 32 CVEs were published on October 19, 2011: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2011-3516](https://cve.now/CVE-2011-3516.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on W (no CVSS) - [CVE-2011-3521](https://cve.now/CVE-2011-3521.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Updat (no CVSS) - [CVE-2011-3544](https://cve.now/CVE-2011-3544.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot (CVSS 9.8, KEV) - [CVE-2011-3545](https://cve.now/CVE-2011-3545.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and (no CVSS) - [CVE-2011-3546](https://cve.now/CVE-2011-3546.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 (no CVSS) - [CVE-2011-3547](https://cve.now/CVE-2011-3547.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3548](https://cve.now/CVE-2011-3548.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3549](https://cve.now/CVE-2011-3549.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and (no CVSS) - [CVE-2011-3550](https://cve.now/CVE-2011-3550.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote u (no CVSS) - [CVE-2011-3551](https://cve.now/CVE-2011-3551.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R2 (no CVSS) - [CVE-2011-3552](https://cve.now/CVE-2011-3552.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3553](https://cve.now/CVE-2011-3553.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R2 (no CVSS) - [CVE-2011-3554](https://cve.now/CVE-2011-3554.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3555](https://cve.now/CVE-2011-3555.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote untrusted Java Web St (no CVSS) - [CVE-2011-3556](https://cve.now/CVE-2011-3556.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3557](https://cve.now/CVE-2011-3557.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3558](https://cve.now/CVE-2011-3558.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote u (no CVSS) - [CVE-2011-3560](https://cve.now/CVE-2011-3560.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 (no CVSS) - [CVE-2011-3561](https://cve.now/CVE-2011-3561.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 (no CVSS) - [CVE-2011-3156](https://cve.now/CVE-2011-3156.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3157](https://cve.now/CVE-2011-3157.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3158](https://cve.now/CVE-2011-3158.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3159](https://cve.now/CVE-2011-3159.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3160](https://cve.now/CVE-2011-3160.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3161](https://cve.now/CVE-2011-3161.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3162](https://cve.now/CVE-2011-3162.md): Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers (no CVSS) - [CVE-2011-3294](https://cve.now/CVE-2011-3294.md): Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (no CVSS) - [CVE-2011-4136](https://cve.now/CVE-2011-4136.md): django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for (no CVSS, django) - [CVE-2011-4137](https://cve.now/CVE-2011-4137.md): The verify\_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that (no CVSS, django) - [CVE-2011-4138](https://cve.now/CVE-2011-4138.md): The verify\_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validi (no CVSS, django) - [CVE-2011-4139](https://cve.now/CVE-2011-4139.md): Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows (no CVSS, django) - [CVE-2011-4140](https://cve.now/CVE-2011-4140.md): The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting (no CVSS, django) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-10-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.