# CVEs published 2011-09-16

18 CVEs were published on September 16, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3495](https://cve.now/CVE-2011-3495.md): Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify (no CVSS)
- [CVE-2011-3496](https://cve.now/CVE-2011-3496.md): service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (no CVSS)
- [CVE-2011-3497](https://cve.now/CVE-2011-3497.md): service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possib (no CVSS)
- [CVE-2011-3498](https://cve.now/CVE-2011-3498.md): Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) a (no CVSS)
- [CVE-2011-3499](https://cve.now/CVE-2011-3499.md): Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possi (no CVSS)
- [CVE-2011-3500](https://cve.now/CVE-2011-3500.md): Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2011-3501](https://cve.now/CVE-2011-3501.md): Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large (no CVSS)
- [CVE-2011-3502](https://cve.now/CVE-2011-3502.md): The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request wi (no CVSS)
- [CVE-2011-3503](https://cve.now/CVE-2011-3503.md): Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attacker (no CVSS)
- [CVE-2011-3486](https://cve.now/CVE-2011-3486.md): Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which (no CVSS)
- [CVE-2011-3487](https://cve.now/CVE-2011-3487.md): Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2011-3488](https://cve.now/CVE-2011-3488.md): Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc cha (no CVSS)
- [CVE-2011-3489](https://cve.now/CVE-2011-3489.md): RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2011-3490](https://cve.now/CVE-2011-3490.md): Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of s (no CVSS)
- [CVE-2011-3491](https://cve.now/CVE-2011-3491.md): Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) a (no CVSS)
- [CVE-2011-3492](https://cve.now/CVE-2011-3492.md): Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2011-3493](https://cve.now/CVE-2011-3493.md): Multiple stack-based buffer overflows in the DH\_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to caus (no CVSS)
- [CVE-2011-3494](https://cve.now/CVE-2011-3494.md): WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.