# CVEs published 2011-02-02 25 CVEs were published on February 2, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2010-3041](https://cve.now/CVE-2010-3041.md): Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 (no CVSS) - [CVE-2010-3042](https://cve.now/CVE-2010-3042.md): Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 (no CVSS) - [CVE-2010-3043](https://cve.now/CVE-2010-3043.md): Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 (no CVSS) - [CVE-2010-3044](https://cve.now/CVE-2010-3044.md): Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 (no CVSS) - [CVE-2010-3269](https://cve.now/CVE-2010-3269.md): Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP2 (no CVSS) - [CVE-2010-3270](https://cve.now/CVE-2010-3270.md): Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authentica (no CVSS) - [CVE-2011-0521](https://cve.now/CVE-2011-0521.md): The dvb\_ca\_ioctl function in drivers/media/dvb/ttpci/av7110\_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain (no CVSS) - [CVE-2011-0757](https://cve.now/CVE-2011-0757.md): IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which (no CVSS) - [CVE-2011-0752](https://cve.now/CVE-2011-0752.md): The extract function in PHP before 5.2.15 does not prevent use of the EXTR\_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal arra (no CVSS) - [CVE-2011-0753](https://cve.now/CVE-2011-0753.md): Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attacker (no CVSS) - [CVE-2011-0754](https://cve.now/CVE-2011-0754.md): The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbol (no CVSS) - [CVE-2011-0755](https://cve.now/CVE-2011-0755.md): Integer overflow in the mt\_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return valu (no CVSS) - [CVE-2010-3719](https://cve.now/CVE-2010-3719.md): Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remot (no CVSS) - [CVE-2010-3854](https://cve.now/CVE-2010-3854.md): Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 al (no CVSS) - [CVE-2010-3929](https://cve.now/CVE-2010-3929.md): SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vector (no CVSS) - [CVE-2010-3930](https://cve.now/CVE-2010-3930.md): Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vector (no CVSS) - [CVE-2010-4015](https://cve.now/CVE-2010-4015.md): Buffer overflow in the gettoken function in contrib/intarray/\_int\_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4. (no CVSS) - [CVE-2010-4652](https://cve.now/CVE-2010-4652.md): Heap-based buffer overflow in the sql\_prepare\_where function (contrib/mod\_sql.c) in ProFTPD before 1.3.3d, when mod\_sql is enabled, allows r (no CVSS) - [CVE-2011-0017](https://cve.now/CVE-2011-0017.md): The open\_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which al (no CVSS) - [CVE-2011-0276](https://cve.now/CVE-2011-0276.md): HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager (no CVSS) - [CVE-2011-0738](https://cve.now/CVE-2011-0738.md): MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.5 (no CVSS) - [CVE-2011-0739](https://cve.now/CVE-2011-0739.md): The deliver function in the sendmail delivery agent (lib/mail/network/delivery\_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allo (no CVSS, mail) - [CVE-2011-0740](https://cve.now/CVE-2011-0740.md): Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie\_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers (no CVSS) - [CVE-2011-0741](https://cve.now/CVE-2011-0741.md): Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2011-0742](https://cve.now/CVE-2011-0742.md): Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted I (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-02-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.