# CVEs published 2011-03-23 28 CVEs were published on March 23, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2010-4769](https://cve.now/CVE-2010-4769.md): Directory traversal vulnerability in the Jimtawl (com\_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and… (no CVSS) - [CVE-2010-4770](https://cve.now/CVE-2010-4770.md): SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2010-4771](https://cve.now/CVE-2010-4771.md): SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2010-4772](https://cve.now/CVE-2010-4772.md): Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2010-4773](https://cve.now/CVE-2010-4773.md): Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA ( 2) 2010.11.15; Hitachi EUR Form Service… (no CVSS) - [CVE-2010-4774](https://cve.now/CVE-2010-4774.md): SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a… (no CVSS) - [CVE-2010-4775](https://cve.now/CVE-2010-4775.md): The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which… (no CVSS) - [CVE-2010-4776](https://cve.now/CVE-2010-4776.md): SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute… (no CVSS) - [CVE-2011-0172](https://cve.now/CVE-2011-0172.md): AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via… (no CVSS) - [CVE-2011-0173](https://cve.now/CVE-2011-0173.md): Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute… (no CVSS) - [CVE-2011-0174](https://cve.now/CVE-2011-0174.md): Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code… (no CVSS) - [CVE-2011-0175](https://cve.now/CVE-2011-0175.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code… (no CVSS) - [CVE-2011-0176](https://cve.now/CVE-2011-0176.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code… (no CVSS) - [CVE-2011-0177](https://cve.now/CVE-2011-0177.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code… (no CVSS) - [CVE-2011-0178](https://cve.now/CVE-2011-0178.md): The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the… (no CVSS) - [CVE-2011-0179](https://cve.now/CVE-2011-0179.md): CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption… (no CVSS) - [CVE-2011-0180](https://cve.now/CVE-2011-0180.md): Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a… (no CVSS) - [CVE-2011-0181](https://cve.now/CVE-2011-0181.md): Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service… (no CVSS) - [CVE-2011-0182](https://cve.now/CVE-2011-0182.md): The i386\_set\_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users… (no CVSS) - [CVE-2011-0183](https://cve.now/CVE-2011-0183.md): Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote… (no CVSS) - [CVE-2011-0184](https://cve.now/CVE-2011-0184.md): QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2011-0186](https://cve.now/CVE-2011-0186.md): QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2011-0187](https://cve.now/CVE-2011-0187.md): The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially… (no CVSS) - [CVE-2011-0188](https://cve.now/CVE-2011-0188.md): The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7… (no CVSS) - [CVE-2011-0189](https://cve.now/CVE-2011-0189.md): The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection… (no CVSS) - [CVE-2011-0190](https://cve.now/CVE-2011-0190.md): Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote… (no CVSS) - [CVE-2011-0193](https://cve.now/CVE-2011-0193.md): Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial… (no CVSS) - [CVE-2011-0194](https://cve.now/CVE-2011-0194.md): Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2011-03-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.