# CVEs published 2011-11-09

16 CVEs were published on November 9, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1373](https://cve.now/CVE-2011-1373.md): Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE\_M (no CVSS)
- [CVE-2011-2739](https://cve.now/CVE-2011-2739.md): The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of fil (no CVSS)
- [CVE-2011-2740](https://cve.now/CVE-2011-2740.md): EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon (no CVSS)
- [CVE-2011-3985](https://cve.now/CVE-2011-3985.md): Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecifie (no CVSS)
- [CVE-2011-3997](https://cve.now/CVE-2011-3997.md): Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected (no CVSS)
- [CVE-2011-3998](https://cve.now/CVE-2011-3998.md): Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-3999](https://cve.now/CVE-2011-3999.md): Cross-site scripting (XSS) vulnerability in the RSS/Atom feed-reader implementation in Iwate Portal Bar allows remote attackers to inject ar (no CVSS)
- [CVE-2011-3647](https://cve.now/CVE-2011-3647.md): The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls (no CVSS)
- [CVE-2011-3648](https://cve.now/CVE-2011-3648.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7 (no CVSS)
- [CVE-2011-3649](https://cve.now/CVE-2011-3649.md): Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, (no CVSS)
- [CVE-2011-3650](https://cve.now/CVE-2011-3650.md): Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files t (no CVSS)
- [CVE-2011-3651](https://cve.now/CVE-2011-3651.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a deni (no CVSS)
- [CVE-2011-3652](https://cve.now/CVE-2011-3652.md): The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers (no CVSS)
- [CVE-2011-3653](https://cve.now/CVE-2011-3653.md): Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver (no CVSS)
- [CVE-2011-3654](https://cve.now/CVE-2011-3654.md): The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SV (no CVSS)
- [CVE-2011-3655](https://cve.now/CVE-2011-3655.md): Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapp (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.