# CVEs published 2011-11-03

17 CVEs were published on November 3, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3986](https://cve.now/CVE-2011-3986.md): Cross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecifie (no CVSS)
- [CVE-2011-3987](https://cve.now/CVE-2011-3987.md): dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to c (no CVSS)
- [CVE-2011-3992](https://cve.now/CVE-2011-3992.md): Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC (no CVSS)
- [CVE-2011-3993](https://cve.now/CVE-2011-3993.md): SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoT (no CVSS)
- [CVE-2011-3994](https://cve.now/CVE-2011-3994.md): Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 (no CVSS)
- [CVE-2011-3996](https://cve.now/CVE-2011-3996.md): The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packe (no CVSS)
- [CVE-2011-4277](https://cve.now/CVE-2011-4277.md): Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2011-3379](https://cve.now/CVE-2011-3379.md): The is\_a function in PHP 5.3.7 and 5.3.8 triggers a call to the \_\_autoload function, which makes it easier for remote attackers to execute a (no CVSS)
- [CVE-2011-4078](https://cve.now/CVE-2011-4078.md): include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request (no CVSS)
- [CVE-2011-4100](https://cve.now/CVE-2011-4100.md): The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize (no CVSS)
- [CVE-2011-4101](https://cve.now/CVE-2011-4101.md): The dissect\_infiniband\_common function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark 1.4.0 through 1.4.9 a (no CVSS)
- [CVE-2011-4102](https://cve.now/CVE-2011-4102.md): Heap-based buffer overflow in the erf\_read\_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6. (no CVSS)
- [CVE-2011-2676](https://cve.now/CVE-2011-2676.md): The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not req (no CVSS)
- [CVE-2011-3995](https://cve.now/CVE-2011-3995.md): Unspecified vulnerability in Twilight Frontier Touhou Hisouten 1.06 and earlier allows remote attackers to cause a denial of service (daemon (no CVSS)
- [CVE-2011-4005](https://cve.now/CVE-2011-4005.md): Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Busine (no CVSS)
- [CVE-2011-4273](https://cve.now/CVE-2011-4273.md): Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-4274](https://cve.now/CVE-2011-4274.md): Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inje (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.