# CVEs published 2011-05-09

18 CVEs were published on May 9, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4284](https://cve.now/CVE-2010-4284.md): SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in… (no CVSS)
- [CVE-2011-0426](https://cve.now/CVE-2011-0426.md): Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware… (no CVSS)
- [CVE-2011-1015](https://cve.now/CVE-2011-1015.md): The is\_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script… (no CVSS)
- [CVE-2011-1574](https://cve.now/CVE-2011-1574.md): Stack-based buffer overflow in the ReadS3M method in load\_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute… (no CVSS)
- [CVE-2011-1598](https://cve.now/CVE-2011-1598.md): The bcm\_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which… (no CVSS)
- [CVE-2011-1748](https://cve.now/CVE-2011-1748.md): The raw\_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which… (no CVSS)
- [CVE-2011-1788](https://cve.now/CVE-2011-1788.md): vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via… (no CVSS)
- [CVE-2011-1789](https://cve.now/CVE-2011-1789.md): The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1… (no CVSS)
- [CVE-2011-1907](https://cve.now/CVE-2011-1907.md): ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial… (no CVSS)
- [CVE-2011-1013](https://cve.now/CVE-2011-1013.md): Integer signedness error in the drm\_modeset\_ctl function in (1) drivers/gpu/drm/drm\_irq.c in the Direct Rendering Manager (DRM) subsystem… (no CVSS)
- [CVE-2011-1090](https://cve.now/CVE-2011-1090.md): The \_\_nfs4\_proc\_set\_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated… (no CVSS)
- [CVE-2011-1323](https://cve.now/CVE-2011-1323.md): Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x… (no CVSS)
- [CVE-2011-1324](https://cve.now/CVE-2011-1324.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers… (no CVSS)
- [CVE-2011-1547](https://cve.now/CVE-2011-1547.md): Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled… (no CVSS)
- [CVE-2011-1745](https://cve.now/CVE-2011-1745.md): Integer overflow in the agp\_generic\_insert\_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local… (no CVSS)
- [CVE-2011-1746](https://cve.now/CVE-2011-1746.md): Multiple integer overflows in the (1) agp\_allocate\_memory and (2) agp\_create\_user\_memory functions in drivers/char/agp/generic.c in the… (no CVSS)
- [CVE-2011-1747](https://cve.now/CVE-2011-1747.md): The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC\_RESERVE and (2)… (no CVSS)
- [CVE-2011-2022](https://cve.now/CVE-2011-2022.md): The agp\_generic\_remove\_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.