# CVEs published 2011-09-14

5 CVEs were published on September 14, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2595](https://cve.now/CVE-2011-2595.md): Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id param (no CVSS)
- [CVE-2011-3208](https://cve.now/CVE-2011-3208.md): Stack-based buffer overflow in the split\_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 al (no CVSS)
- [CVE-2011-3481](https://cve.now/CVE-2011-3481.md): The index\_get\_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote atta (no CVSS)
- [CVE-2011-2201](https://cve.now/CVE-2011-2201.md): The Data::FormValidator module 4.66 and earlier for Perl, when untaint\_all\_constraints is enabled, does not properly preserve the taint attr (no CVSS)
- [CVE-2011-2581](https://cve.now/CVE-2011-2581.md): The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on N (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
