# CVEs published 2011-03-23 28 CVEs were published on March 23, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2010-4769](https://cve.now/CVE-2010-4769.md): Directory traversal vulnerability in the Jimtawl (com\_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and p (no CVSS) - [CVE-2010-4770](https://cve.now/CVE-2010-4770.md): SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands vi (no CVSS) - [CVE-2010-4771](https://cve.now/CVE-2010-4771.md): SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2010-4772](https://cve.now/CVE-2010-4772.md): Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2010-4773](https://cve.now/CVE-2010-4773.md): Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (\* 2) 2010.11.15; Hitachi EUR Form Service bef (no CVSS) - [CVE-2010-4774](https://cve.now/CVE-2010-4774.md): SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a dif (no CVSS) - [CVE-2010-4775](https://cve.now/CVE-2010-4775.md): The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows (no CVSS) - [CVE-2010-4776](https://cve.now/CVE-2010-4776.md): SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary (no CVSS) - [CVE-2011-0172](https://cve.now/CVE-2011-0172.md): AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-F (no CVSS) - [CVE-2011-0173](https://cve.now/CVE-2011-0173.md): Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary (no CVSS) - [CVE-2011-0174](https://cve.now/CVE-2011-0174.md): Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code vi (no CVSS) - [CVE-2011-0175](https://cve.now/CVE-2011-0175.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via (no CVSS) - [CVE-2011-0176](https://cve.now/CVE-2011-0176.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via (no CVSS) - [CVE-2011-0177](https://cve.now/CVE-2011-0177.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via (no CVSS) - [CVE-2011-0178](https://cve.now/CVE-2011-0178.md): The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTempo (no CVSS) - [CVE-2011-0179](https://cve.now/CVE-2011-0179.md): CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2011-0180](https://cve.now/CVE-2011-0180.md): Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a cra (no CVSS) - [CVE-2011-0181](https://cve.now/CVE-2011-0181.md): Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS) - [CVE-2011-0182](https://cve.now/CVE-2011-0182.md): The i386\_set\_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to (no CVSS) - [CVE-2011-0183](https://cve.now/CVE-2011-0183.md): Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote atta (no CVSS) - [CVE-2011-0184](https://cve.now/CVE-2011-0184.md): QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS) - [CVE-2011-0186](https://cve.now/CVE-2011-0186.md): QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS) - [CVE-2011-0187](https://cve.now/CVE-2011-0187.md): The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sen (no CVSS) - [CVE-2011-0188](https://cve.now/CVE-2011-0188.md): The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and (no CVSS) - [CVE-2011-0189](https://cve.now/CVE-2011-0189.md): The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dial (no CVSS) - [CVE-2011-0190](https://cve.now/CVE-2011-0190.md): Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers (no CVSS) - [CVE-2011-0193](https://cve.now/CVE-2011-0193.md): Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2011-0194](https://cve.now/CVE-2011-0194.md): Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of serv (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-03-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.