# CVEs published 2011-02-04 20 CVEs were published on February 4, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0025](https://cve.now/CVE-2011-0025.md): IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially… (no CVSS) - [CVE-2011-0776](https://cve.now/CVE-2011-0776.md): The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potentially sensitive… (no CVSS) - [CVE-2011-0777](https://cve.now/CVE-2011-0777.md): Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly have… (no CVSS) - [CVE-2011-0778](https://cve.now/CVE-2011-0778.md): Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same… (no CVSS) - [CVE-2011-0779](https://cve.now/CVE-2011-0779.md): Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of… (no CVSS) - [CVE-2011-0780](https://cve.now/CVE-2011-0780.md): The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows user-assisted… (no CVSS) - [CVE-2011-0781](https://cve.now/CVE-2011-0781.md): Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors. (no CVSS) - [CVE-2011-0782](https://cve.now/CVE-2011-0782.md): Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL libraries, which… (no CVSS) - [CVE-2011-0783](https://cve.now/CVE-2011-0783.md): Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service… (no CVSS) - [CVE-2011-0784](https://cve.now/CVE-2011-0784.md): Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related to audio. (no CVSS) - [CVE-2004-0694](https://cve.now/CVE-2004-0694.md): Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… (no CVSS) - [CVE-2011-0047](https://cve.now/CVE-2011-0047.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2011-0049](https://cve.now/CVE-2011-0049.md): Directory traversal vulnerability in the \_list\_file\_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote… (no CVSS) - [CVE-2011-0537](https://cve.now/CVE-2011-0537.md): Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other… (no CVSS) - [CVE-2011-0649](https://cve.now/CVE-2011-0649.md): Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0… (no CVSS) - [CVE-2011-0771](https://cve.now/CVE-2011-0771.md): The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote… (no CVSS) - [CVE-2011-0772](https://cve.now/CVE-2011-0772.md): Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to… (no CVSS) - [CVE-2011-0773](https://cve.now/CVE-2011-0773.md): Cross-site scripting (XSS) vulnerability in pivotx/modules/module\_image.php in PivotX before 2.2.3 allows remote attackers to inject… (no CVSS) - [CVE-2011-0774](https://cve.now/CVE-2011-0774.md): PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) includes/ping.php and (2)… (no CVSS) - [CVE-2011-0775](https://cve.now/CVE-2011-0775.md): pivotx/modules/module\_image.php in PivotX 2.2.2 allows remote attackers to obtain sensitive information via a non-existent file in the… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2011-02-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.