# CVEs published 2011-01-11

28 CVEs were published on January 11, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3676](https://cve.now/CVE-2010-3676.md): storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (no CVSS)
- [CVE-2010-3677](https://cve.now/CVE-2010-3677.md): Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) vi (no CVSS)
- [CVE-2010-3678](https://cve.now/CVE-2010-3678.md): Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with (no CVSS)
- [CVE-2010-3679](https://cve.now/CVE-2010-3679.md): Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to (no CVSS)
- [CVE-2010-3680](https://cve.now/CVE-2010-3680.md): Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary ta (no CVSS)
- [CVE-2010-3681](https://cve.now/CVE-2010-3681.md): Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by (no CVSS)
- [CVE-2010-3682](https://cve.now/CVE-2010-3682.md): Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by (no CVSS)
- [CVE-2010-3683](https://cve.now/CVE-2010-3683.md): Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows re (no CVSS)
- [CVE-2010-1679](https://cve.now/CVE-2010-1679.md): Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary (no CVSS)
- [CVE-2010-3444](https://cve.now/CVE-2010-3444.md): Buffer overflow in the log2vis\_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi (no CVSS)
- [CVE-2010-3865](https://cve.now/CVE-2010-3865.md): Integer overflow in the rds\_rdma\_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash (no CVSS)
- [CVE-2010-4175](https://cve.now/CVE-2010-4175.md): Integer overflow in the rds\_cmsg\_rdma\_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause a denial of service (no CVSS)
- [CVE-2010-4225](https://cve.now/CVE-2010-4225.md): Unspecified vulnerability in the mod\_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .a (no CVSS)
- [CVE-2010-4242](https://cve.now/CVE-2010-4242.md): The hci\_uart\_tty\_open function in the HCI UART driver (drivers/bluetooth/hci\_ldisc.c) in the Linux kernel 2.6.36, and possibly other version (no CVSS)
- [CVE-2010-4247](https://cve.now/CVE-2010-4247.md): The do\_block\_io\_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kerne (no CVSS)
- [CVE-2010-4525](https://cve.now/CVE-2010-4525.md): Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm\_vcpu\_events-\>interrupt.pad structure member, which allows local users to obtain (no CVSS)
- [CVE-2010-4526](https://cve.now/CVE-2010-4526.md): Race condition in the sctp\_icmp\_proto\_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attac (no CVSS)
- [CVE-2010-4645](https://cve.now/CVE-2010-4645.md): strtod.c, as used in the zend\_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent at (no CVSS)
- [CVE-2010-4693](https://cve.now/CVE-2010-4693.md): Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2011-0003](https://cve.now/CVE-2011-0003.md): MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspeci (no CVSS)
- [CVE-2011-0005](https://cve.now/CVE-2011-0005.md): Cross-site scripting (XSS) vulnerability in the com\_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2011-0007](https://cve.now/CVE-2011-0007.md): pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump (no CVSS)
- [CVE-2011-0402](https://cve.now/CVE-2011-0402.md): dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspec (no CVSS)
- [CVE-2011-0403](https://cve.now/CVE-2011-0403.md): Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote a (no CVSS)
- [CVE-2011-0404](https://cve.now/CVE-2011-0404.md): Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to (no CVSS)
- [CVE-2011-0405](https://cve.now/CVE-2011-0405.md): Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic\_quotes\_gpc is disabled, allows r (no CVSS)
- [CVE-2011-0406](https://cve.now/CVE-2011-0406.md): Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long reques (no CVSS)
- [CVE-2011-0407](https://cve.now/CVE-2011-0407.md): SQL injection vulnerability in the store function in \_phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remot (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.