# CVEs published 2011-10-04

18 CVEs were published on October 4, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1221](https://cve.now/CVE-2011-1221.md): Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through… (no CVSS)
- [CVE-2011-2443](https://cve.now/CVE-2011-2443.md): Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory… (no CVSS)
- [CVE-2011-2876](https://cve.now/CVE-2011-2876.md): Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-2877](https://cve.now/CVE-2011-2877.md): Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or… (no CVSS)
- [CVE-2011-2878](https://cve.now/CVE-2011-2878.md): Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the… (no CVSS)
- [CVE-2011-2879](https://cve.now/CVE-2011-2879.md): Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes, which… (no CVSS)
- [CVE-2011-2880](https://cve.now/CVE-2011-2880.md): Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-2881](https://cve.now/CVE-2011-2881.md): Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2011-3873](https://cve.now/CVE-2011-3873.md): Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2011-1572](https://cve.now/CVE-2011-1572.md): Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to… (no CVSS)
- [CVE-2011-2894](https://cve.now/CVE-2011-2894.md): Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize… (no CVSS, org.springframework:spring-core · org.springframework.secur…)
- [CVE-2011-3354](https://cve.now/CVE-2011-3354.md): The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2011-3976](https://cve.now/CVE-2011-3976.md): Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response… (no CVSS)
- [CVE-2011-3977](https://cve.now/CVE-2011-3977.md): Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to… (no CVSS)
- [CVE-2011-3978](https://cve.now/CVE-2011-3978.md): Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject… (no CVSS)
- [CVE-2011-3979](https://cve.now/CVE-2011-3979.md): Cross-site scripting (XSS) vulnerability in ztemp/view\_compiled/Theme/theme\_admin\_setasdefault.php in the theme module in Zikula… (no CVSS)
- [CVE-2011-3980](https://cve.now/CVE-2011-3980.md): Unspecified vulnerability in the Drag Drop Mass Upload (ameos\_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote… (no CVSS)
- [CVE-2011-3981](https://cve.now/CVE-2011-3981.md): PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.