# CVEs published 2011-11-04

12 CVEs were published on November 4, 2011: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2011-1513](https://cve.now/CVE-2011-1513.md): Static code injection vulnerability in install\_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not re (no CVSS)
- [CVE-2011-3164](https://cve.now/CVE-2011-3164.md): Unspecified vulnerability in HP-UX Containers (formerly HP-UX Secure Resource Partitions (SRP)) A.03.00, A.03.00.002, and A.03.01, when runn (no CVSS)
- [CVE-2011-3171](https://cve.now/CVE-2011-3171.md): Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly (no CVSS)
- [CVE-2011-3330](https://cve.now/CVE-2011-3330.md): Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vije (no CVSS)
- [CVE-2011-3364](https://cve.now/CVE-2011-3364.md): Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkMa (no CVSS)
- [CVE-2011-3402](https://cve.now/CVE-2011-3402.md): Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, (CVSS 8.8, KEV)
- [CVE-2011-3581](https://cve.now/CVE-2011-3581.md): Heap-based buffer overflow in the ldns\_rr\_new\_frm\_str\_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2011-3594](https://cve.now/CVE-2011-3594.md): The g\_markup\_escape\_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other product (no CVSS)
- [CVE-2011-3616](https://cve.now/CVE-2011-3616.md): The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack (no CVSS)
- [CVE-2011-3989](https://cve.now/CVE-2011-3989.md): SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vecto (no CVSS)
- [CVE-2011-3991](https://cve.now/CVE-2011-3991.md): Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions. (no CVSS)
- [CVE-2011-4066](https://cve.now/CVE-2011-4066.md): SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.