# CVEs published 2011-04-10 30 CVEs were published on April 10, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0765](https://cve.now/CVE-2011-0765.md): Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privileges via a crafted co (no CVSS) - [CVE-2011-0994](https://cve.now/CVE-2011-0994.md): Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2011-1089](https://cve.now/CVE-2011-1089.md): The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to wri (no CVSS) - [CVE-2011-1095](https://cve.now/CVE-2011-1095.md): locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local (no CVSS) - [CVE-2011-1672](https://cve.now/CVE-2011-1672.md): The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain (no CVSS) - [CVE-2011-1673](https://cve.now/CVE-2011-1673.md): BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration fi (no CVSS) - [CVE-2011-1674](https://cve.now/CVE-2011-1674.md): The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration pag (no CVSS) - [CVE-2011-1675](https://cve.now/CVE-2011-1675.md): mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would inter (no CVSS) - [CVE-2011-1676](https://cve.now/CVE-2011-1676.md): mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local (no CVSS) - [CVE-2011-1677](https://cve.now/CVE-2011-1677.md): mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspeci (no CVSS) - [CVE-2011-1678](https://cve.now/CVE-2011-1678.md): smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mt (no CVSS) - [CVE-2011-1679](https://cve.now/CVE-2011-1679.md): ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file w (no CVSS) - [CVE-2011-1680](https://cve.now/CVE-2011-1680.md): ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecif (no CVSS) - [CVE-2011-1681](https://cve.now/CVE-2011-1681.md): vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab fil (no CVSS) - [CVE-2011-0462](https://cve.now/CVE-2011-0462.md): Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1 (no CVSS) - [CVE-2011-0463](https://cve.now/CVE-2011-0463.md): The ocfs2\_prepare\_page\_for\_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel befor (no CVSS) - [CVE-2011-0466](https://cve.now/CVE-2011-0466.md): The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access rest (no CVSS) - [CVE-2011-1163](https://cve.now/CVE-2011-1163.md): The osf\_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions (no CVSS) - [CVE-2011-1660](https://cve.now/CVE-2011-1660.md): Multiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before (no CVSS) - [CVE-2011-1661](https://cve.now/CVE-2011-1661.md): The Node Quick Find module 6.x-1.1 for Drupal does not use db\_rewrite\_sql when presenting node titles, which allows remote attackers to bypa (no CVSS) - [CVE-2011-1662](https://cve.now/CVE-2011-1662.md): Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject a (no CVSS) - [CVE-2011-1663](https://cve.now/CVE-2011-1663.md): SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to execute arbitrary (no CVSS) - [CVE-2011-1664](https://cve.now/CVE-2011-1664.md): Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers (no CVSS) - [CVE-2011-1665](https://cve.now/CVE-2011-1665.md): PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backu (no CVSS) - [CVE-2011-1666](https://cve.now/CVE-2011-1666.md): Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv. (no CVSS) - [CVE-2011-1667](https://cve.now/CVE-2011-1667.md): SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter (no CVSS) - [CVE-2011-1668](https://cve.now/CVE-2011-1668.md): Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote (no CVSS) - [CVE-2011-1669](https://cve.now/CVE-2011-1669.md): Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arb (no CVSS) - [CVE-2011-1670](https://cve.now/CVE-2011-1670.md): Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote attac (no CVSS) - [CVE-2011-1671](https://cve.now/CVE-2011-1671.md): Cross-site scripting (XSS) vulnerability in app/controllers/todos\_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attacker (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-04-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.