# CVEs published 2011-02-08

21 CVEs were published on February 8, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4728](https://cve.now/CVE-2010-4728.md): Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat (no CVSS)
- [CVE-2010-4729](https://cve.now/CVE-2010-4729.md): Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it (no CVSS)
- [CVE-2011-0535](https://cve.now/CVE-2011-0535.md): Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authenticat (no CVSS)
- [CVE-2011-0538](https://cve.now/CVE-2011-0538.md): Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap- (no CVSS)
- [CVE-2011-0885](https://cve.now/CVE-2011-0885.md): A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme (no CVSS)
- [CVE-2011-0886](https://cve.now/CVE-2011-0886.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with fi (no CVSS)
- [CVE-2011-0887](https://cve.now/CVE-2011-0887.md): The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs (no CVSS)
- [CVE-2011-0911](https://cve.now/CVE-2011-0911.md): Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2011-0912](https://cve.now/CVE-2011-0912.md): Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arb (no CVSS)
- [CVE-2011-0913](https://cve.now/CVE-2011-0913.md): Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers (no CVSS)
- [CVE-2011-0914](https://cve.now/CVE-2011-0914.md): Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to (no CVSS)
- [CVE-2011-0915](https://cve.now/CVE-2011-0915.md): Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long nam (no CVSS)
- [CVE-2011-0916](https://cve.now/CVE-2011-0916.md): Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in (no CVSS)
- [CVE-2011-0917](https://cve.now/CVE-2011-0917.md): Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operati (no CVSS)
- [CVE-2011-0918](https://cve.now/CVE-2011-0918.md): Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via lo (no CVSS)
- [CVE-2011-0919](https://cve.now/CVE-2011-0919.md): Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2011-0920](https://cve.now/CVE-2011-0920.md): The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attack (no CVSS)
- [CVE-2011-0526](https://cve.now/CVE-2011-0526.md): Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2011-0908](https://cve.now/CVE-2011-0908.md): Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct p (no CVSS)
- [CVE-2011-0909](https://cve.now/CVE-2011-0909.md): Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2011-0910](https://cve.now/CVE-2011-0910.md): The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.