# CVEs published 2011-04-18

15 CVEs were published on April 18, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4229](https://cve.now/CVE-2010-4229.md): Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell… (no CVSS)
- [CVE-2011-0286](https://cve.now/CVE-2011-0286.md): Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM)… (no CVSS)
- [CVE-2011-1168](https://cve.now/CVE-2011-1168.md): Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml\_part.cpp in Konqueror in KDE SC 4.4.0 through… (no CVSS)
- [CVE-2011-1426](https://cve.now/CVE-2011-1426.md): The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through… (no CVSS)
- [CVE-2011-1496](https://cve.now/CVE-2011-1496.md): tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S… (no CVSS)
- [CVE-2011-1518](https://cve.now/CVE-2011-1518.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow… (no CVSS)
- [CVE-2011-1714](https://cve.now/CVE-2011-1714.md): Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp\_primitive.php in QooxDoo 1.3 and possibly other… (no CVSS, qooxdoo)
- [CVE-2011-1715](https://cve.now/CVE-2011-1715.md): Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used… (no CVSS)
- [CVE-2011-1716](https://cve.now/CVE-2011-1716.md): Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2011-1717](https://cve.now/CVE-2011-1717.md): Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local… (no CVSS)
- [CVE-2009-0788](https://cve.now/CVE-2009-0788.md): Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain… (no CVSS)
- [CVE-2010-1171](https://cve.now/CVE-2010-1171.md): Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access… (no CVSS)
- [CVE-2011-0012](https://cve.now/CVE-2011-0012.md): The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a… (no CVSS)
- [CVE-2011-0988](https://cve.now/CVE-2011-0988.md): pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware… (no CVSS)
- [CVE-2011-1179](https://cve.now/CVE-2011-1179.md): The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.