# CVEs published 2012-03-22

22 CVEs were published on March 22, 2012: 0 critical, 1 high. Days are UTC.

- [CVE-2011-3045](https://cve.now/CVE-2011-3045.md): Integer signedness error in the png\_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.8 (CVSS 8.8)
- [CVE-2011-3050](https://cve.now/CVE-2011-3050.md): Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers (no CVSS)
- [CVE-2011-3051](https://cve.now/CVE-2011-3051.md): Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers (no CVSS)
- [CVE-2011-3052](https://cve.now/CVE-2011-3052.md): The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to caus (no CVSS)
- [CVE-2011-3053](https://cve.now/CVE-2011-3053.md): Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-3054](https://cve.now/CVE-2011-3054.md): The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to (no CVSS)
- [CVE-2011-3055](https://cve.now/CVE-2011-3055.md): The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, whic (no CVSS)
- [CVE-2011-3056](https://cve.now/CVE-2011-3056.md): Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe." (no CVSS)
- [CVE-2011-3057](https://cve.now/CVE-2011-3057.md): Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an inv (no CVSS)
- [CVE-2012-1845](https://cve.now/CVE-2012-1845.md): Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanis (no CVSS)
- [CVE-2012-1846](https://cve.now/CVE-2012-1846.md): Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed (no CVSS)
- [CVE-2012-1838](https://cve.now/CVE-2012-1838.md): The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cle (no CVSS)
- [CVE-2012-1839](https://cve.now/CVE-2012-1839.md): Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP\_ClientDriver.php in AjaXplorer 3.2.x (no CVSS)
- [CVE-2012-1840](https://cve.now/CVE-2012-1840.md): AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtai (no CVSS)
- [CVE-2012-1841](https://cve.now/CVE-2012-1841.md): Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), als (no CVSS)
- [CVE-2012-1842](https://cve.now/CVE-2012-1842.md): Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS001 (no CVSS)
- [CVE-2012-1843](https://cve.now/CVE-2012-1843.md): Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G (no CVSS)
- [CVE-2012-1844](https://cve.now/CVE-2012-1844.md): The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmw (no CVSS)
- [CVE-2012-0719](https://cve.now/CVE-2012-0719.md): Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2012-1662](https://cve.now/CVE-2012-1662.md): CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a de (no CVSS)
- [CVE-2012-1836](https://cve.now/CVE-2012-1836.md): Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that (no CVSS)
- [CVE-2012-1837](https://cve.now/CVE-2012-1837.md): The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-03-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.