# CVEs published 2011-03-01 34 CVEs were published on March 1, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0278](https://cve.now/CVE-2011-0278.md): Unspecified vulnerability in HP Web Jetadmin 10.2 Service Release 3 and 4 allows local users to bypass intended access restrictions via unkn (no CVSS) - [CVE-2011-0454](https://cve.now/CVE-2011-0454.md): Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3 (no CVSS) - [CVE-2011-0711](https://cve.now/CVE-2011-0711.md): The xfs\_fs\_geometry function in fs/xfs/xfs\_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member (no CVSS) - [CVE-2011-0719](https://cve.now/CVE-2011-0719.md): Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD (no CVSS) - [CVE-2011-1010](https://cve.now/CVE-2011-1010.md): Buffer overflow in the mac\_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denia (no CVSS) - [CVE-2011-1012](https://cve.now/CVE-2011-1012.md): The ldm\_parse\_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the V (no CVSS) - [CVE-2011-1017](https://cve.now/CVE-2011-1017.md): Heap-based buffer overflow in the ldm\_frag\_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local us (no CVSS) - [CVE-2011-1106](https://cve.now/CVE-2011-1106.md): Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2011-1107](https://cve.now/CVE-2011-1107.md): Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors. (no CVSS) - [CVE-2011-1108](https://cve.now/CVE-2011-1108.md): Google Chrome before 9.0.597.107 does not properly implement JavaScript dialogs, which allows remote attackers to cause a denial of service (no CVSS) - [CVE-2011-1109](https://cve.now/CVE-2011-1109.md): Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers (no CVSS) - [CVE-2011-1110](https://cve.now/CVE-2011-1110.md): Google Chrome before 9.0.597.107 does not properly implement key frame rules, which allows remote attackers to cause a denial of service or (no CVSS) - [CVE-2011-1111](https://cve.now/CVE-2011-1111.md): Google Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote attackers to cause a denial of service (app (no CVSS) - [CVE-2011-1112](https://cve.now/CVE-2011-1112.md): Google Chrome before 9.0.597.107 does not properly perform SVG rendering, which allows remote attackers to cause a denial of service (applic (no CVSS) - [CVE-2011-1113](https://cve.now/CVE-2011-1113.md): Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers t (no CVSS) - [CVE-2011-1114](https://cve.now/CVE-2011-1114.md): Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly hav (no CVSS) - [CVE-2011-1115](https://cve.now/CVE-2011-1115.md): Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly hav (no CVSS) - [CVE-2011-1116](https://cve.now/CVE-2011-1116.md): Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or poss (no CVSS) - [CVE-2011-1117](https://cve.now/CVE-2011-1117.md): Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or pos (no CVSS) - [CVE-2011-1118](https://cve.now/CVE-2011-1118.md): Google Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote attackers to cause a denial of service (app (no CVSS) - [CVE-2011-1119](https://cve.now/CVE-2011-1119.md): Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause a denial of service (no CVSS) - [CVE-2011-1120](https://cve.now/CVE-2011-1120.md): The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via u (no CVSS) - [CVE-2011-1121](https://cve.now/CVE-2011-1121.md): Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS) - [CVE-2011-1122](https://cve.now/CVE-2011-1122.md): The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via u (no CVSS) - [CVE-2011-1123](https://cve.now/CVE-2011-1123.md): Google Chrome before 9.0.597.107 does not properly restrict access to internal extension functions, which has unspecified impact and remote (no CVSS) - [CVE-2011-1124](https://cve.now/CVE-2011-1124.md): Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS) - [CVE-2011-1125](https://cve.now/CVE-2011-1125.md): Google Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers to cause a denial of service or possibly ha (no CVSS) - [CVE-2010-4747](https://cve.now/CVE-2010-4747.md): Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allow (no CVSS) - [CVE-2010-4748](https://cve.now/CVE-2010-4748.md): Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2010-4749](https://cve.now/CVE-2010-4749.md): Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2010-4750](https://cve.now/CVE-2010-4750.md): Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers t (no CVSS) - [CVE-2010-4751](https://cve.now/CVE-2010-4751.md): SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic\_quotes\_gpc is disabled, allows remote authenticated users to e (no CVSS) - [CVE-2010-4752](https://cve.now/CVE-2010-4752.md): SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arb (no CVSS) - [CVE-2010-4753](https://cve.now/CVE-2010-4753.md): Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-03-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.