# CVEs published 2011-02-21

18 CVEs were published on February 21, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1056](https://cve.now/CVE-2011-1056.md): The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation… (no CVSS)
- [CVE-2010-4745](https://cve.now/CVE-2010-4745.md): Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2011-1047](https://cve.now/CVE-2011-1047.md): Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote… (no CVSS)
- [CVE-2011-1048](https://cve.now/CVE-2011-1048.md): SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2011-1049](https://cve.now/CVE-2011-1049.md): Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of… (no CVSS)
- [CVE-2011-1050](https://cve.now/CVE-2011-1050.md): Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings"… (no CVSS)
- [CVE-2011-1051](https://cve.now/CVE-2011-1051.md): Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related… (no CVSS)
- [CVE-2011-1052](https://cve.now/CVE-2011-1052.md): Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to… (no CVSS)
- [CVE-2011-1053](https://cve.now/CVE-2011-1053.md): Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a… (no CVSS)
- [CVE-2011-1054](https://cve.now/CVE-2011-1054.md): Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2011-1055](https://cve.now/CVE-2011-1055.md): SQL injection vulnerability in api/ice\_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2011-0329](https://cve.now/CVE-2011-0329.md): Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0… (no CVSS)
- [CVE-2011-0330](https://cve.now/CVE-2011-0330.md): The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the… (no CVSS)
- [CVE-2011-0449](https://cve.now/CVE-2011-0449.md): actionpack/lib/action\_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not… (no CVSS, actionpack)
- [CVE-2011-0694](https://cve.now/CVE-2011-0694.md): RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses… (no CVSS)
- [CVE-2011-1045](https://cve.now/CVE-2011-1045.md): Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote… (no CVSS)
- [CVE-2011-1046](https://cve.now/CVE-2011-1046.md): IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process… (no CVSS)
- [CVE-2011-0448](https://cve.now/CVE-2011-0448.md): Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for… (no CVSS, activerecord)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.