# CVEs published 2011-04-29

12 CVEs were published on April 29, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0729](https://cve.now/CVE-2011-0729.md): dbus\_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit che (no CVSS)
- [CVE-2011-1499](https://cve.now/CVE-2011-1499.md): acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, (no CVSS)
- [CVE-2011-1535](https://cve.now/CVE-2011-1535.md): Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux) before 6.3 allows remote authenticated users to obtain sensitive in (no CVSS)
- [CVE-2011-1536](https://cve.now/CVE-2011-1536.md): Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. (no CVSS)
- [CVE-2011-1540](https://cve.now/CVE-2011-1540.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via (no CVSS)
- [CVE-2011-1541](https://cve.now/CVE-2011-1541.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, (no CVSS)
- [CVE-2011-1542](https://cve.now/CVE-2011-1542.md): Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2011-1543](https://cve.now/CVE-2011-1543.md): Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authent (no CVSS)
- [CVE-2011-1589](https://cve.now/CVE-2011-1589.md): Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (enco (no CVSS)
- [CVE-2011-1590](https://cve.now/CVE-2011-1590.md): The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which a (no CVSS)
- [CVE-2011-1591](https://cve.now/CVE-2011-1591.md): Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers t (no CVSS)
- [CVE-2011-1592](https://cve.now/CVE-2011-1592.md): The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during deco (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.