# CVEs published 2011-02-21

18 CVEs were published on February 21, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1056](https://cve.now/CVE-2011-1056.md): The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation direc (no CVSS)
- [CVE-2010-4745](https://cve.now/CVE-2010-4745.md): Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-1047](https://cve.now/CVE-2011-1047.md): Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers (no CVSS)
- [CVE-2011-1048](https://cve.now/CVE-2011-1048.md): SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2011-1049](https://cve.now/CVE-2011-1049.md): Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of s (no CVSS)
- [CVE-2011-1050](https://cve.now/CVE-2011-1050.md): Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" a (no CVSS)
- [CVE-2011-1051](https://cve.now/CVE-2011-1051.md): Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related t (no CVSS)
- [CVE-2011-1052](https://cve.now/CVE-2011-1052.md): Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory (no CVSS)
- [CVE-2011-1053](https://cve.now/CVE-2011-1053.md): Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a d (no CVSS)
- [CVE-2011-1054](https://cve.now/CVE-2011-1054.md): Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2011-1055](https://cve.now/CVE-2011-1055.md): SQL injection vulnerability in api/ice\_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2011-0329](https://cve.now/CVE-2011-0329.md): Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 all (no CVSS)
- [CVE-2011-0330](https://cve.now/CVE-2011-0330.md): The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfIn (no CVSS)
- [CVE-2011-0449](https://cve.now/CVE-2011-0449.md): actionpack/lib/action\_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not pr (no CVSS, actionpack)
- [CVE-2011-0694](https://cve.now/CVE-2011-0694.md): RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictab (no CVSS)
- [CVE-2011-1045](https://cve.now/CVE-2011-1045.md): Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attack (no CVSS)
- [CVE-2011-1046](https://cve.now/CVE-2011-1046.md): IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Man (no CVSS)
- [CVE-2011-0448](https://cve.now/CVE-2011-0448.md): Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remo (no CVSS, activerecord)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.