# CVEs published 2011-05-03

65 CVEs were published on May 3, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1303](https://cve.now/CVE-2011-1303.md): Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or po (no CVSS)
- [CVE-2011-1304](https://cve.now/CVE-2011-1304.md): Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to pl (no CVSS)
- [CVE-2011-1305](https://cve.now/CVE-2011-1305.md): Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly ha (no CVSS)
- [CVE-2011-1434](https://cve.now/CVE-2011-1434.md): Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial (no CVSS)
- [CVE-2011-1435](https://cve.now/CVE-2011-1435.md): Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local (no CVSS)
- [CVE-2011-1436](https://cve.now/CVE-2011-1436.md): Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a deni (no CVSS)
- [CVE-2011-1437](https://cve.now/CVE-2011-1437.md): Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecif (no CVSS)
- [CVE-2011-1438](https://cve.now/CVE-2011-1438.md): Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs. (no CVSS)
- [CVE-2011-1439](https://cve.now/CVE-2011-1439.md): Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vecto (no CVSS)
- [CVE-2011-1440](https://cve.now/CVE-2011-1440.md): Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-1441](https://cve.now/CVE-2011-1441.md): Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which (no CVSS)
- [CVE-2011-1442](https://cve.now/CVE-2011-1442.md): Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node (no CVSS)
- [CVE-2011-1443](https://cve.now/CVE-2011-1443.md): Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibl (no CVSS)
- [CVE-2011-1444](https://cve.now/CVE-2011-1444.md): Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial (no CVSS)
- [CVE-2011-1445](https://cve.now/CVE-2011-1445.md): Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of- (no CVSS)
- [CVE-2011-1446](https://cve.now/CVE-2011-1446.md): Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interru (no CVSS)
- [CVE-2011-1447](https://cve.now/CVE-2011-1447.md): Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or pos (no CVSS)
- [CVE-2011-1448](https://cve.now/CVE-2011-1448.md): Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a denial of service o (no CVSS)
- [CVE-2011-1449](https://cve.now/CVE-2011-1449.md): Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial (no CVSS)
- [CVE-2011-1450](https://cve.now/CVE-2011-1450.md): Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possi (no CVSS)
- [CVE-2011-1451](https://cve.now/CVE-2011-1451.md): Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibl (no CVSS)
- [CVE-2011-1452](https://cve.now/CVE-2011-1452.md): Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual re (no CVSS)
- [CVE-2011-1454](https://cve.now/CVE-2011-1454.md): Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a den (no CVSS)
- [CVE-2011-1455](https://cve.now/CVE-2011-1455.md): Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a de (no CVSS)
- [CVE-2011-1456](https://cve.now/CVE-2011-1456.md): Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly (no CVSS)
- [CVE-2011-1604](https://cve.now/CVE-2011-1604.md): Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before (no CVSS)
- [CVE-2011-1605](https://cve.now/CVE-2011-1605.md): Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)s (no CVSS)
- [CVE-2011-1606](https://cve.now/CVE-2011-1606.md): Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su (no CVSS)
- [CVE-2011-1607](https://cve.now/CVE-2011-1607.md): Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before (no CVSS)
- [CVE-2011-1609](https://cve.now/CVE-2011-1609.md): SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5) (no CVSS)
- [CVE-2011-1610](https://cve.now/CVE-2011-1610.md): Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications (no CVSS)
- [CVE-2011-1613](https://cve.now/CVE-2011-1613.md): Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7. (no CVSS)
- [CVE-2011-1785](https://cve.now/CVE-2011-1785.md): VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network (no CVSS)
- [CVE-2011-1786](https://cve.now/CVE-2011-1786.md): lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed i (no CVSS)
- [CVE-2009-5022](https://cve.now/CVE-2009-5022.md): Heap-based buffer overflow in tif\_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2010-4665](https://cve.now/CVE-2010-4665.md): Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2011-1522](https://cve.now/CVE-2011-1522.md): Multiple SQL injection vulnerabilities in the Doctrine\\DBAL\\Platforms\\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2 (no CVSS)
- [CVE-2011-1593](https://cve.now/CVE-2011-1593.md): Multiple integer overflows in the next\_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a deni (no CVSS)
- [CVE-2011-1684](https://cve.now/CVE-2011-1684.md): Heap-based buffer overflow in the MP4\_ReadBox\_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1 (no CVSS)
- [CVE-2011-1726](https://cve.now/CVE-2011-1726.md): Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2011-1727](https://cve.now/CVE-2011-1727.md): Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2011-1739](https://cve.now/CVE-2011-1739.md): The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block wit (no CVSS)
- [CVE-2011-1846](https://cve.now/CVE-2011-1846.md): IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows rem (no CVSS)
- [CVE-2011-1847](https://cve.now/CVE-2011-1847.md): IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, whi (no CVSS)
- [CVE-2011-0610](https://cve.now/CVE-2011-0610.md): The CoolType library in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0 (no CVSS)
- [CVE-2011-1087](https://cve.now/CVE-2011-1087.md): Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and (no CVSS)
- [CVE-2011-1169](https://cve.now/CVE-2011-1169.md): Array index error in the asihpi\_hpi\_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2 (no CVSS)
- [CVE-2011-1494](https://cve.now/CVE-2011-1494.md): Integer overflow in the \_ctl\_do\_mpt\_command function in drivers/scsi/mpt2sas/mpt2sas\_ctl.c in the Linux kernel 2.6.38 and earlier might allo (no CVSS)
- [CVE-2011-1495](https://cve.now/CVE-2011-1495.md): drivers/scsi/mpt2sas/mpt2sas\_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performi (no CVSS)
- [CVE-2011-1523](https://cve.now/CVE-2011-1523.md): Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbit (no CVSS)
- [CVE-2011-1537](https://cve.now/CVE-2011-1537.md): Cross-site scripting (XSS) vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2011-1538](https://cve.now/CVE-2011-1538.md): Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitr (no CVSS)
- [CVE-2011-1539](https://cve.now/CVE-2011-1539.md): Unspecified vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to obtain sensitive information via unknown v (no CVSS)
- [CVE-2011-1544](https://cve.now/CVE-2011-1544.md): Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via u (no CVSS)
- [CVE-2011-1545](https://cve.now/CVE-2011-1545.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack th (no CVSS)
- [CVE-2011-1577](https://cve.now/CVE-2011-1577.md): Heap-based buffer overflow in the is\_gpt\_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically prox (no CVSS)
- [CVE-2011-1724](https://cve.now/CVE-2011-1724.md): Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vecto (no CVSS)
- [CVE-2011-1844](https://cve.now/CVE-2011-1844.md): Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an a (no CVSS)
- [CVE-2011-1845](https://cve.now/CVE-2011-1845.md): Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a (no CVSS)
- [CVE-2009-5074](https://cve.now/CVE-2009-5074.md): Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vecto (no CVSS)
- [CVE-2010-4802](https://cve.now/CVE-2010-4802.md): Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote atta (no CVSS)
- [CVE-2010-4803](https://cve.now/CVE-2010-4803.md): Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors. (no CVSS)
- [CVE-2011-1841](https://cve.now/CVE-2011-1841.md): Cross-site scripting (XSS) vulnerability in the link\_to helper in Mojolicious before 1.12 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2011-1842](https://cve.now/CVE-2011-1842.md): dbus\_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEn (no CVSS)
- [CVE-2011-1843](https://cve.now/CVE-2011-1843.md): Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic ci (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.