# CVEs published 2011-05-26

14 CVEs were published on May 26, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2246](https://cve.now/CVE-2010-2246.md): feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharac (no CVSS)
- [CVE-2011-1758](https://cve.now/CVE-2011-1758.md): The krb5\_save\_ccname\_done function in providers/krb5/krb5\_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automati (no CVSS)
- [CVE-2011-1775](https://cve.now/CVE-2011-1775.md): The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verif (no CVSS)
- [CVE-2010-4251](https://cve.now/CVE-2010-4251.md): The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which (no CVSS)
- [CVE-2010-4805](https://cve.now/CVE-2010-4805.md): The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which (no CVSS)
- [CVE-2010-4806](https://cve.now/CVE-2010-4806.md): The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended ac (no CVSS)
- [CVE-2010-4807](https://cve.now/CVE-2010-4807.md): Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service (infinit (no CVSS)
- [CVE-2011-1581](https://cve.now/CVE-2011-1581.md): The bond\_select\_queue function in drivers/net/bonding/bond\_main.c in the Linux kernel before 2.6.39, when a network device with a large numb (no CVSS)
- [CVE-2011-1801](https://cve.now/CVE-2011-1801.md): Unspecified vulnerability in Google Chrome before 11.0.696.71 allows remote attackers to bypass the pop-up blocker via unknown vectors. (no CVSS)
- [CVE-2011-1804](https://cve.now/CVE-2011-1804.md): rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, wh (no CVSS)
- [CVE-2011-1806](https://cve.now/CVE-2011-1806.md): Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1807](https://cve.now/CVE-2011-1807.md): Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vec (no CVSS)
- [CVE-2011-2172](https://cve.now/CVE-2011-2172.md): Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject (no CVSS)
- [CVE-2011-2173](https://cve.now/CVE-2011-2173.md): The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.