# CVEs published 2011-03-29

8 CVEs were published on March 29, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1674](https://cve.now/CVE-2010-1674.md): The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereferenc (no CVSS)
- [CVE-2010-1675](https://cve.now/CVE-2010-1675.md): bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS\_PATHLIMIT path attribu (no CVSS)
- [CVE-2011-0441](https://cve.now/CVE-2011-0441.md): The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a director (no CVSS)
- [CVE-2011-0728](https://cve.now/CVE-2011-0728.md): Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arb (no CVSS, loggerhead)
- [CVE-2011-0892](https://cve.now/CVE-2011-0892.md): Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2011-1176](https://cve.now/CVE-2011-1176.md): The configuration merger in itk.c in the Steinar H. (no CVSS)
- [CVE-2011-1205](https://cve.now/CVE-2011-1205.md): Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 thro (no CVSS)
- [CVE-2011-1472](https://cve.now/CVE-2011-1472.md): The Nokia E75 phone with firmware before 211.12.01 allows physically proximate attackers to bypass the Device Lock code by entering an unspe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.