# CVEs published 2011-03-28

11 CVEs were published on March 28, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1524](https://cve.now/CVE-2011-1524.md): Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remot (no CVSS)
- [CVE-2010-3275](https://cve.now/CVE-2010-3275.md): libdirectx\_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an (no CVSS)
- [CVE-2010-3276](https://cve.now/CVE-2010-3276.md): libdirectx\_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an (no CVSS)
- [CVE-2011-0024](https://cve.now/CVE-2011-0024.md): Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application cra (no CVSS)
- [CVE-2011-0439](https://cve.now/CVE-2011-0439.md): Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2011-0440](https://cve.now/CVE-2011-0440.md): Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the au (no CVSS)
- [CVE-2011-0458](https://cve.now/CVE-2011-0458.md): Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Tr (no CVSS)
- [CVE-2011-0545](https://cve.now/CVE-2011-0545.md): Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers (no CVSS)
- [CVE-2011-0760](https://cve.now/CVE-2011-0760.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin (no CVSS)
- [CVE-2011-1167](https://cve.now/CVE-2011-1167.md): Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif\_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to (no CVSS)
- [CVE-2011-1420](https://cve.now/CVE-2011-1420.md): EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows loc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.