# CVEs published 2011-09-17 38 CVEs were published on September 17, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-1740](https://cve.now/CVE-2011-1740.md): EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information ab (no CVSS) - [CVE-2011-2738](https://cve.now/CVE-2011-2738.md): Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and Cisco (no CVSS) - [CVE-2011-2834](https://cve.now/CVE-2011-2834.md): Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or (no CVSS) - [CVE-2011-2835](https://cve.now/CVE-2011-2835.md): Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact (no CVSS) - [CVE-2011-2836](https://cve.now/CVE-2011-2836.md): Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier (no CVSS) - [CVE-2011-2837](https://cve.now/CVE-2011-2837.md): Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecifie (no CVSS) - [CVE-2011-2838](https://cve.now/CVE-2011-2838.md): Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and (no CVSS) - [CVE-2011-2840](https://cve.now/CVE-2011-2840.md): Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interactio (no CVSS) - [CVE-2011-2841](https://cve.now/CVE-2011-2841.md): Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote a (no CVSS) - [CVE-2011-2842](https://cve.now/CVE-2011-2842.md): The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack (no CVSS) - [CVE-2011-2843](https://cve.now/CVE-2011-2843.md): Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of (no CVSS) - [CVE-2011-2844](https://cve.now/CVE-2011-2844.md): Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bo (no CVSS) - [CVE-2011-2846](https://cve.now/CVE-2011-2846.md): Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-2847](https://cve.now/CVE-2011-2847.md): Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of servic (no CVSS) - [CVE-2011-2848](https://cve.now/CVE-2011-2848.md): Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button. (no CVSS) - [CVE-2011-2849](https://cve.now/CVE-2011-2849.md): The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer derefe (no CVSS) - [CVE-2011-2850](https://cve.now/CVE-2011-2850.md): Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out (no CVSS) - [CVE-2011-2851](https://cve.now/CVE-2011-2851.md): Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds (no CVSS) - [CVE-2011-2852](https://cve.now/CVE-2011-2852.md): Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibl (no CVSS) - [CVE-2011-2853](https://cve.now/CVE-2011-2853.md): Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-2854](https://cve.now/CVE-2011-2854.md): Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-2855](https://cve.now/CVE-2011-2855.md): Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to ca (no CVSS) - [CVE-2011-2856](https://cve.now/CVE-2011-2856.md): Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. (no CVSS) - [CVE-2011-2857](https://cve.now/CVE-2011-2857.md): Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-2858](https://cve.now/CVE-2011-2858.md): Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a denial of service (out- (no CVSS) - [CVE-2011-2859](https://cve.now/CVE-2011-2859.md): Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and attack vectors. (no CVSS) - [CVE-2011-2860](https://cve.now/CVE-2011-2860.md): Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-2861](https://cve.now/CVE-2011-2861.md): Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified im (no CVSS) - [CVE-2011-2862](https://cve.now/CVE-2011-2862.md): Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact (no CVSS) - [CVE-2011-2864](https://cve.now/CVE-2011-2864.md): Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (o (no CVSS) - [CVE-2011-2874](https://cve.now/CVE-2011-2874.md): Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspe (no CVSS) - [CVE-2011-2875](https://cve.now/CVE-2011-2875.md): Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a (no CVSS) - [CVE-2011-3234](https://cve.now/CVE-2011-3234.md): Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds (no CVSS) - [CVE-2011-3345](https://cve.now/CVE-2011-3345.md): ulp/sdp/sdp\_proc.c in the ib\_sdp module (aka ib\_sdp.ko) in the ofa\_kernel package in the InfiniBand driver implementation in OpenFabrics Ent (no CVSS) - [CVE-2011-3423](https://cve.now/CVE-2011-3423.md): Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and (no CVSS) - [CVE-2011-3424](https://cve.now/CVE-2011-3424.md): Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed F (no CVSS) - [CVE-2011-3575](https://cve.now/CVE-2011-3575.md): Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users (no CVSS) - [CVE-2011-3576](https://cve.now/CVE-2011-3576.md): Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the Pa (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-09-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.