# CVEs published 2011-09-08

8 CVEs were published on September 8, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3341](https://cve.now/CVE-2011-3341.md): Multiple off-by-one errors in order\_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or po (no CVSS)
- [CVE-2011-3342](https://cve.now/CVE-2011-3342.md): Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arb (no CVSS)
- [CVE-2011-3343](https://cve.now/CVE-2011-3343.md): Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges (no CVSS)
- [CVE-2011-3381](https://cve.now/CVE-2011-3381.md): Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified (no CVSS)
- [CVE-2011-3382](https://cve.now/CVE-2011-3382.md): Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecif (no CVSS)
- [CVE-2011-3384](https://cve.now/CVE-2011-3384.md): Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2011-3391](https://cve.now/CVE-2011-3391.md): IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key F (no CVSS)
- [CVE-2011-3392](https://cve.now/CVE-2011-3392.md): Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.