# CVEs published 2011-04-18

15 CVEs were published on April 18, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4229](https://cve.now/CVE-2010-4229.md): Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks (no CVSS)
- [CVE-2011-0286](https://cve.now/CVE-2011-0286.md): Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) Black (no CVSS)
- [CVE-2011-1168](https://cve.now/CVE-2011-1168.md): Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml\_part.cpp in Konqueror in KDE SC 4.4.0 through 4 (no CVSS)
- [CVE-2011-1426](https://cve.now/CVE-2011-1426.md): The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1 (no CVSS)
- [CVE-2011-1496](https://cve.now/CVE-2011-1496.md): tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S co (no CVSS)
- [CVE-2011-1518](https://cve.now/CVE-2011-1518.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remo (no CVSS)
- [CVE-2011-1714](https://cve.now/CVE-2011-1714.md): Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp\_primitive.php in QooxDoo 1.3 and possibly other versions (no CVSS, qooxdoo)
- [CVE-2011-1715](https://cve.now/CVE-2011-1715.md): Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in (no CVSS)
- [CVE-2011-1716](https://cve.now/CVE-2011-1716.md): Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2011-1717](https://cve.now/CVE-2011-1717.md): Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applicat (no CVSS)
- [CVE-2009-0788](https://cve.now/CVE-2009-0788.md): Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain u (no CVSS)
- [CVE-2010-1171](https://cve.now/CVE-2010-1171.md): Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arb (no CVSS)
- [CVE-2011-0012](https://cve.now/CVE-2011-0012.md): The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symli (no CVSS)
- [CVE-2011-0988](https://cve.now/CVE-2011-0988.md): pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware ex (no CVSS)
- [CVE-2011-1179](https://cve.now/CVE-2011-1179.md): The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.