# CVEs published 2011-02-04 20 CVEs were published on February 4, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0025](https://cve.now/CVE-2011-0025.md): IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially s (no CVSS) - [CVE-2011-0776](https://cve.now/CVE-2011-0776.md): The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potentially sensitive infor (no CVSS) - [CVE-2011-0777](https://cve.now/CVE-2011-0777.md): Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly have unspec (no CVSS) - [CVE-2011-0778](https://cve.now/CVE-2011-0778.md): Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same O (no CVSS) - [CVE-2011-0779](https://cve.now/CVE-2011-0779.md): Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of s (no CVSS) - [CVE-2011-0780](https://cve.now/CVE-2011-0780.md): The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows user-assisted remote (no CVSS) - [CVE-2011-0781](https://cve.now/CVE-2011-0781.md): Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors. (no CVSS) - [CVE-2011-0782](https://cve.now/CVE-2011-0782.md): Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL libraries, which allows (no CVSS) - [CVE-2011-0783](https://cve.now/CVE-2011-0783.md): Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service (application (no CVSS) - [CVE-2011-0784](https://cve.now/CVE-2011-0784.md): Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related to audio. (no CVSS) - [CVE-2004-0694](https://cve.now/CVE-2004-0694.md): Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (no CVSS) - [CVE-2011-0047](https://cve.now/CVE-2011-0047.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to inject arbitrary web script or HTML via craft (no CVSS) - [CVE-2011-0049](https://cve.now/CVE-2011-0049.md): Directory traversal vulnerability in the \_list\_file\_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers (no CVSS) - [CVE-2011-0537](https://cve.now/CVE-2011-0537.md): Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other vers (no CVSS) - [CVE-2011-0649](https://cve.now/CVE-2011-0649.md): Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime (no CVSS) - [CVE-2011-0771](https://cve.now/CVE-2011-0771.md): The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticate (no CVSS) - [CVE-2011-0772](https://cve.now/CVE-2011-0772.md): Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inj (no CVSS) - [CVE-2011-0773](https://cve.now/CVE-2011-0773.md): Cross-site scripting (XSS) vulnerability in pivotx/modules/module\_image.php in PivotX before 2.2.3 allows remote attackers to inject arbitra (no CVSS) - [CVE-2011-0774](https://cve.now/CVE-2011-0774.md): PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) includes/ping.php and (2) includes/s (no CVSS) - [CVE-2011-0775](https://cve.now/CVE-2011-0775.md): pivotx/modules/module\_image.php in PivotX 2.2.2 allows remote attackers to obtain sensitive information via a non-existent file in the image (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-02-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.