# CVEs published 2011-02-03 12 CVEs were published on February 3, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2009-5052](https://cve.now/CVE-2009-5052.md): Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors. (no CVSS) - [CVE-2009-5053](https://cve.now/CVE-2009-5053.md): Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a (no CVSS) - [CVE-2009-5054](https://cve.now/CVE-2009-5054.md): Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass in (no CVSS, smarty/smarty) - [CVE-2010-4722](https://cve.now/CVE-2010-4722.md): Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and remote attack vectors. (no CVSS) - [CVE-2010-4723](https://cve.now/CVE-2010-4723.md): Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned obje (no CVSS) - [CVE-2010-4724](https://cve.now/CVE-2010-4724.md): Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors. (no CVSS) - [CVE-2010-4725](https://cve.now/CVE-2010-4725.md): Smarty before 3.0.0 RC3 does not properly handle an on value of the asp\_tags option in the php.ini file, which has unspecified impact and re (no CVSS) - [CVE-2010-4726](https://cve.now/CVE-2010-4726.md): Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. (no CVSS) - [CVE-2010-4727](https://cve.now/CVE-2010-4727.md): Smarty before 3.0.0 beta 7 does not properly handle the \ tags, which has unspecified impact and remote attack vectors. (no CVSS) - [CVE-2011-0720](https://cve.now/CVE-2011-0720.md): Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain a (no CVSS, plone) - [CVE-2011-0354](https://cve.now/CVE-2011-0354.md): The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has (no CVSS) - [CVE-2011-0451](https://cve.now/CVE-2011-0451.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/camp (no CVSS, ec-cube/ec-cube) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-02-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.