# CVEs published 2011-01-22

8 CVEs were published on January 22, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3879](https://cve.now/CVE-2010-3879.md): FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesyste (no CVSS)
- [CVE-2010-4238](https://cve.now/CVE-2010-4238.md): The vbd\_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to ca (no CVSS)
- [CVE-2010-4243](https://cve.now/CVE-2010-4243.md): fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) argu (no CVSS)
- [CVE-2010-4704](https://cve.now/CVE-2010-4704.md): libavcodec/vorbis\_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2010-4705](https://cve.now/CVE-2010-4705.md): Integer overflow in the vorbis\_residue\_decode\_internal function in libavcodec/vorbis\_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, ha (no CVSS)
- [CVE-2011-0002](https://cve.now/CVE-2011-0002.md): libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attacker (no CVSS)
- [CVE-2011-0635](https://cve.now/CVE-2011-0635.md): Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into con (no CVSS)
- [CVE-2011-0636](https://cve.now/CVE-2011-0636.md): The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly ot (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.