# CVEs published 2011-02-14

18 CVEs were published on February 14, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2008-7274](https://cve.now/CVE-2008-7274.md): IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal… (no CVSS)
- [CVE-2010-4730](https://cve.now/CVE-2010-4730.md): Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and… (no CVSS)
- [CVE-2010-4731](https://cve.now/CVE-2010-4731.md): Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100… (no CVSS)
- [CVE-2010-4732](https://cve.now/CVE-2010-4732.md): cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the… (no CVSS)
- [CVE-2010-4733](https://cve.now/CVE-2010-4733.md): WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter… (no CVSS)
- [CVE-2011-1032](https://cve.now/CVE-2011-1032.md): IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login… (no CVSS)
- [CVE-2011-1033](https://cve.now/CVE-2011-1033.md): Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via… (no CVSS)
- [CVE-2011-0986](https://cve.now/CVE-2011-0986.md): phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and… (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2011-0987](https://cve.now/CVE-2011-0987.md): The PMA\_Bookmark\_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not… (no CVSS)
- [CVE-2011-1029](https://cve.now/CVE-2011-1029.md): Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary… (no CVSS)
- [CVE-2011-1030](https://cve.now/CVE-2011-1030.md): Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2011-1031](https://cve.now/CVE-2011-1031.md): The feh\_unique\_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink… (no CVSS)
- [CVE-2011-0446](https://cve.now/CVE-2011-0446.md): Multiple cross-site scripting (XSS) vulnerabilities in the mail\_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when… (no CVSS, actionpack · actionview)
- [CVE-2011-0447](https://cve.now/CVE-2011-0447.md): Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an… (no CVSS, actionpack)
- [CVE-2011-0696](https://cve.now/CVE-2011-0696.md): Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which… (no CVSS, django)
- [CVE-2011-0697](https://cve.now/CVE-2011-0697.md): Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject… (no CVSS, django)
- [CVE-2011-0698](https://cve.now/CVE-2011-0698.md): Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or… (no CVSS, django)
- [CVE-2011-0702](https://cve.now/CVE-2011-0702.md): The feh\_unique\_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.