# CVEs published 2011-05-31 28 CVEs were published on May 31, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-0546](https://cve.now/CVE-2011-0546.md): Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote (no CVSS) - [CVE-2011-0628](https://cve.now/CVE-2011-0628.md): Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows (no CVSS) - [CVE-2011-0766](https://cve.now/CVE-2011-0766.md): The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14 (no CVSS) - [CVE-2011-0943](https://cve.now/CVE-2011-0943.md): Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a cra (no CVSS) - [CVE-2011-0949](https://cve.now/CVE-2011-0949.md): Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd\_lock files from /tmp/, which allows remote atta (no CVSS) - [CVE-2011-1213](https://cve.now/CVE-2011-1213.md): Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrar (no CVSS) - [CVE-2011-1214](https://cve.now/CVE-2011-1214.md): Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execut (no CVSS) - [CVE-2011-1215](https://cve.now/CVE-2011-1215.md): Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execut (no CVSS) - [CVE-2011-1216](https://cve.now/CVE-2011-1216.md): Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute (no CVSS) - [CVE-2011-1217](https://cve.now/CVE-2011-1217.md): Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitra (no CVSS) - [CVE-2011-1218](https://cve.now/CVE-2011-1218.md): Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrar (no CVSS) - [CVE-2011-1329](https://cve.now/CVE-2011-1329.md): WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PH (no CVSS) - [CVE-2011-1485](https://cve.now/CVE-2011-1485.md): Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a (no CVSS) - [CVE-2011-1486](https://cve.now/CVE-2011-1486.md): libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash (no CVSS) - [CVE-2011-1512](https://cve.now/CVE-2011-1512.md): Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute (no CVSS) - [CVE-2011-1645](https://cve.now/CVE-2011-1645.md): The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the W (no CVSS) - [CVE-2011-1646](https://cve.now/CVE-2011-1646.md): The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the W (no CVSS) - [CVE-2011-1647](https://cve.now/CVE-2011-1647.md): The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the W (no CVSS) - [CVE-2011-1649](https://cve.now/CVE-2011-1649.md): The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remot (no CVSS) - [CVE-2011-1651](https://cve.now/CVE-2011-1651.md): Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to c (no CVSS) - [CVE-2011-1910](https://cve.now/CVE-2011-1910.md): Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R (no CVSS) - [CVE-2011-1922](https://cve.now/CVE-2011-1922.md): daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote att (no CVSS) - [CVE-2011-1925](https://cve.now/CVE-2011-1925.md): nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and (no CVSS) - [CVE-2011-1937](https://cve.now/CVE-2011-1937.md): Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn co (no CVSS) - [CVE-2011-1938](https://cve.now/CVE-2011-1938.md): Stack-based buffer overflow in the socket\_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent (no CVSS) - [CVE-2011-1945](https://cve.now/CVE-2011-1945.md): The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) i (no CVSS) - [CVE-2011-2214](https://cve.now/CVE-2011-2214.md): Unspecified vulnerability in the Open Database Connectivity (ODBC) component in 7T Interactive Graphical SCADA System (IGSS) before 9.0.0.11 (no CVSS) - [CVE-2011-2215](https://cve.now/CVE-2011-2215.md): Unspecified vulnerability in WalRack 1.x before 1.1.8 and 2.x before 2.0.6 has unknown impact and attack vectors, possibly related to file d (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-05-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.