# CVEs published 2011-03-25

10 CVEs were published on March 25, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1291](https://cve.now/CVE-2011-1291.md): Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possi (no CVSS)
- [CVE-2011-1292](https://cve.now/CVE-2011-1292.md): Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a deni (no CVSS)
- [CVE-2011-1293](https://cve.now/CVE-2011-1293.md): Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a de (no CVSS)
- [CVE-2011-1294](https://cve.now/CVE-2011-1294.md): Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to ca (no CVSS)
- [CVE-2011-1295](https://cve.now/CVE-2011-1295.md): WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows re (no CVSS)
- [CVE-2011-1296](https://cve.now/CVE-2011-1296.md): Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly (no CVSS)
- [CVE-2011-1400](https://cve.now/CVE-2011-1400.md): The default configuration of the shell\_escape\_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in De (no CVSS)
- [CVE-2011-1519](https://cve.now/CVE-2011-1519.md): The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathn (no CVSS)
- [CVE-2011-1520](https://cve.now/CVE-2011-1520.md): The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server\_Console\_Password), which allows (no CVSS)
- [CVE-2011-0890](https://cve.now/CVE-2011-0890.md): HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
