CVEs published March 14, 2011
7 CVEs were published on March 14, 2011: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- org.apache.tomcat:tomcat
- 2
- pywebdav
- 1
Medium, low and unrated 7
- CVE-2011-0280Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary
- CVE-2011-0432Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV beforepywebdav
- CVE-2011-0700Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web scrip
- CVE-2011-0701wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) p
- CVE-2011-1088Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restricorg.apache.tomcat:tomcat
- CVE-2011-1091libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial
- CVE-2011-1419Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote org.apache.tomcat:tomcat