# CVEs published 2011-10-30 10 CVEs were published on October 30, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2009-0900](https://cve.now/CVE-2009-0900.md): Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges (no CVSS) - [CVE-2009-0905](https://cve.now/CVE-2009-0905.md): IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain (no CVSS) - [CVE-2011-1364](https://cve.now/CVE-2011-1364.md): Cross-site request forgery (CSRF) vulnerability in \_ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin (no CVSS) - [CVE-2011-4211](https://cve.now/CVE-2011-4211.md): The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the openin (no CVSS) - [CVE-2011-4212](https://cve.now/CVE-2011-4212.md): The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users (no CVSS) - [CVE-2011-4213](https://cve.now/CVE-2011-4213.md): The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local (no CVSS) - [CVE-2009-2747](https://cve.now/CVE-2009-2747.md): The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1. (no CVSS) - [CVE-2009-2748](https://cve.now/CVE-2009-2748.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 (no CVSS) - [CVE-2011-1366](https://cve.now/CVE-2011-1366.md): Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x b (no CVSS) - [CVE-2011-1367](https://cve.now/CVE-2011-1367.md): Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allow (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-10-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.