# CVEs published 2011-03-02

16 CVEs were published on March 2, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4754](https://cve.now/CVE-2010-4754.md): The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows (no CVSS)
- [CVE-2010-4755](https://cve.now/CVE-2010-4755.md): The (1) remote\_glob function in sftp-glob.c and the (2) process\_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 an (no CVSS)
- [CVE-2010-4756](https://cve.now/CVE-2010-4756.md): The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and me (no CVSS)
- [CVE-2011-0051](https://cve.now/CVE-2011-0051.md): Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, w (no CVSS)
- [CVE-2011-0053](https://cve.now/CVE-2011-0053.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1. (no CVSS)
- [CVE-2011-0054](https://cve.now/CVE-2011-0054.md): Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow (no CVSS)
- [CVE-2011-0055](https://cve.now/CVE-2011-0055.md): Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMon (no CVSS)
- [CVE-2011-0056](https://cve.now/CVE-2011-0056.md): Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow (no CVSS)
- [CVE-2011-0057](https://cve.now/CVE-2011-0057.md): Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey befor (no CVSS)
- [CVE-2011-0058](https://cve.now/CVE-2011-0058.md): Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to (no CVSS)
- [CVE-2011-0059](https://cve.now/CVE-2011-0059.md): Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allow (no CVSS)
- [CVE-2011-0061](https://cve.now/CVE-2011-0061.md): Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers t (no CVSS)
- [CVE-2011-0062](https://cve.now/CVE-2011-0062.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow r (no CVSS)
- [CVE-2011-0762](https://cve.now/CVE-2011-0762.md): The vsf\_filename\_passes\_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU c (no CVSS)
- [CVE-2011-1004](https://cve.now/CVE-2011-1004.md): The FileUtils.remove\_entry\_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 (no CVSS)
- [CVE-2011-1005](https://cve.now/CVE-2011-1005.md): The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
