# CVEs published 2011-09-20

9 CVEs were published on September 20, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1509](https://cve.now/CVE-2011-1509.md): The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of pass (no CVSS)
- [CVE-2011-1510](https://cve.now/CVE-2011-1510.md): Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to (no CVSS)
- [CVE-2011-1911](https://cve.now/CVE-2011-1911.md): JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable \_flowExecutionKey parameter, which makes it easier (no CVSS)
- [CVE-2011-2672](https://cve.now/CVE-2011-2672.md): Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2011-3360](https://cve.now/CVE-2011-3360.md): Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Troja (no CVSS)
- [CVE-2011-3482](https://cve.now/CVE-2011-3482.md): The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize (no CVSS)
- [CVE-2011-3483](https://cve.now/CVE-2011-3483.md): Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that lead (no CVSS)
- [CVE-2011-3484](https://cve.now/CVE-2011-3484.md): The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly (no CVSS)
- [CVE-2011-3577](https://cve.now/CVE-2011-3577.md): IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Servic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.