# CVEs published 2011-05-09

18 CVEs were published on May 9, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4284](https://cve.now/CVE-2010-4284.md): SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Sams (no CVSS)
- [CVE-2011-0426](https://cve.now/CVE-2011-0426.md): Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter (no CVSS)
- [CVE-2011-1015](https://cve.now/CVE-2011-1015.md): The is\_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source (no CVSS)
- [CVE-2011-1574](https://cve.now/CVE-2011-1574.md): Stack-based buffer overflow in the ReadS3M method in load\_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2011-1598](https://cve.now/CVE-2011-1598.md): The bcm\_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which al (no CVSS)
- [CVE-2011-1748](https://cve.now/CVE-2011-1748.md): The raw\_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which al (no CVSS)
- [CVE-2011-1788](https://cve.now/CVE-2011-1788.md): vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecif (no CVSS)
- [CVE-2011-1789](https://cve.now/CVE-2011-1789.md): The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware (no CVSS)
- [CVE-2011-1907](https://cve.now/CVE-2011-1907.md): ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-1013](https://cve.now/CVE-2011-1013.md): Integer signedness error in the drm\_modeset\_ctl function in (1) drivers/gpu/drm/drm\_irq.c in the Direct Rendering Manager (DRM) subsystem in (no CVSS)
- [CVE-2011-1090](https://cve.now/CVE-2011-1090.md): The \_\_nfs4\_proc\_set\_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by (no CVSS)
- [CVE-2011-1323](https://cve.now/CVE-2011-1323.md): Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through (no CVSS)
- [CVE-2011-1324](https://cve.now/CVE-2011-1324.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers w (no CVSS)
- [CVE-2011-1547](https://cve.now/CVE-2011-1547.md): Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow (no CVSS)
- [CVE-2011-1745](https://cve.now/CVE-2011-1745.md): Integer overflow in the agp\_generic\_insert\_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local us (no CVSS)
- [CVE-2011-1746](https://cve.now/CVE-2011-1746.md): Multiple integer overflows in the (1) agp\_allocate\_memory and (2) agp\_create\_user\_memory functions in drivers/char/agp/generic.c in the Linu (no CVSS)
- [CVE-2011-1747](https://cve.now/CVE-2011-1747.md): The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC\_RESERVE and (2) AG (no CVSS)
- [CVE-2011-2022](https://cve.now/CVE-2011-2022.md): The agp\_generic\_remove\_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.