# CVEs published 2011-11-17

10 CVEs were published on November 17, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3900](https://cve.now/CVE-2011-3900.md): Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified… (no CVSS)
- [CVE-2011-4457](https://cve.now/CVE-2011-4457.md): OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to… (no CVSS, com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sa…)
- [CVE-2011-2770](https://cve.now/CVE-2011-2770.md): Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject… (no CVSS)
- [CVE-2011-3380](https://cve.now/CVE-2011-3380.md): Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash)… (no CVSS)
- [CVE-2011-3627](https://cve.now/CVE-2011-3627.md): The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion… (no CVSS)
- [CVE-2011-3646](https://cve.now/CVE-2011-3646.md): phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js\_frame… (no CVSS)
- [CVE-2011-4073](https://cve.now/CVE-2011-4073.md): Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote… (no CVSS)
- [CVE-2011-4096](https://cve.now/CVE-2011-4096.md): The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2011-4107](https://cve.now/CVE-2011-4107.md): The simplexml\_load\_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x… (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2011-4122](https://cve.now/CVE-2011-4122.md): Directory traversal vulnerability in openpam\_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-11-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.