# CVEs published 2011-05-31 28 CVEs were published on May 31, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0546](https://cve.now/CVE-2011-0546.md): Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the… (no CVSS) - [CVE-2011-0628](https://cve.now/CVE-2011-0628.md): Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android… (no CVSS) - [CVE-2011-0766](https://cve.now/CVE-2011-0766.md): The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before… (no CVSS) - [CVE-2011-0943](https://cve.now/CVE-2011-0943.md): Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a… (no CVSS) - [CVE-2011-0949](https://cve.now/CVE-2011-0949.md): Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd\_lock files from /tmp/, which allows remote… (no CVSS) - [CVE-2011-1213](https://cve.now/CVE-2011-1213.md): Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute… (no CVSS) - [CVE-2011-1214](https://cve.now/CVE-2011-1214.md): Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to… (no CVSS) - [CVE-2011-1215](https://cve.now/CVE-2011-1215.md): Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to… (no CVSS) - [CVE-2011-1216](https://cve.now/CVE-2011-1216.md): Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to… (no CVSS) - [CVE-2011-1217](https://cve.now/CVE-2011-1217.md): Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute… (no CVSS) - [CVE-2011-1218](https://cve.now/CVE-2011-1218.md): Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute… (no CVSS) - [CVE-2011-1329](https://cve.now/CVE-2011-1329.md): WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2011-1485](https://cve.now/CVE-2011-1485.md): Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing… (no CVSS) - [CVE-2011-1486](https://cve.now/CVE-2011-1486.md): libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service… (no CVSS) - [CVE-2011-1512](https://cve.now/CVE-2011-1512.md): Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to… (no CVSS) - [CVE-2011-1645](https://cve.now/CVE-2011-1645.md): The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the… (no CVSS) - [CVE-2011-1646](https://cve.now/CVE-2011-1646.md): The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the… (no CVSS) - [CVE-2011-1647](https://cve.now/CVE-2011-1647.md): The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the… (no CVSS) - [CVE-2011-1649](https://cve.now/CVE-2011-1649.md): The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows… (no CVSS) - [CVE-2011-1651](https://cve.now/CVE-2011-1651.md): Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to… (no CVSS) - [CVE-2011-1910](https://cve.now/CVE-2011-1910.md): Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before… (no CVSS) - [CVE-2011-1922](https://cve.now/CVE-2011-1922.md): daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote… (no CVSS) - [CVE-2011-1925](https://cve.now/CVE-2011-1925.md): nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference… (no CVSS) - [CVE-2011-1937](https://cve.now/CVE-2011-1937.md): Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn… (no CVSS) - [CVE-2011-1938](https://cve.now/CVE-2011-1938.md): Stack-based buffer overflow in the socket\_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow… (no CVSS) - [CVE-2011-1945](https://cve.now/CVE-2011-1945.md): The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA)… (no CVSS) - [CVE-2011-2214](https://cve.now/CVE-2011-2214.md): Unspecified vulnerability in the Open Database Connectivity (ODBC) component in 7T Interactive Graphical SCADA System (IGSS) before… (no CVSS) - [CVE-2011-2215](https://cve.now/CVE-2011-2215.md): Unspecified vulnerability in WalRack 1.x before 1.1.8 and 2.x before 2.0.6 has unknown impact and attack vectors, possibly related to file… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2011-05-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.