# CVEs published 2011-03-15

11 CVEs were published on March 15, 2011: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-4757](https://cve.now/CVE-2010-4757.md): Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2011-0001](https://cve.now/CVE-2011-0001.md): Double free vulnerability in the iscsi\_rx\_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt (no CVSS)
- [CVE-2011-0063](https://cve.now/CVE-2011-0063.md): The \_list\_file\_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal a (no CVSS)
- [CVE-2011-0438](https://cve.now/CVE-2011-0438.md): nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to (no CVSS)
- [CVE-2011-0457](https://cve.now/CVE-2011-0457.md): Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe (no CVSS)
- [CVE-2011-0609](https://cve.now/CVE-2011-0609.md): Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on (CVSS 7.8, KEV)
- [CVE-2011-0695](https://cve.now/CVE-2011-0695.md): Race condition in the cm\_work\_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote (no CVSS)
- [CVE-2011-1092](https://cve.now/CVE-2011-1092.md): Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possib (no CVSS)
- [CVE-2011-1146](https://cve.now/CVE-2011-1146.md): libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers (no CVSS)
- [CVE-2011-1147](https://cve.now/CVE-2011-1147.md): Multiple stack-based and heap-based buffer overflows in the (1) decode\_open\_type and (2) udptl\_rx\_packet functions in main/udptl.c in Asteri (no CVSS)
- [CVE-2011-1427](https://cve.now/CVE-2011-1427.md): Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.