# CVEs published 2011-11-17

10 CVEs were published on November 17, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3900](https://cve.now/CVE-2011-3900.md): Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified o (no CVSS)
- [CVE-2011-4457](https://cve.now/CVE-2011-4457.md): OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain (no CVSS, com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sa…)
- [CVE-2011-2770](https://cve.now/CVE-2011-2770.md): Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject ar (no CVSS)
- [CVE-2011-3380](https://cve.now/CVE-2011-3380.md): Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) vi (no CVSS)
- [CVE-2011-3627](https://cve.now/CVE-2011-3627.md): The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion l (no CVSS)
- [CVE-2011-3646](https://cve.now/CVE-2011-3646.md): phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js\_frame para (no CVSS)
- [CVE-2011-4073](https://cve.now/CVE-2011-4073.md): Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated (no CVSS)
- [CVE-2011-4096](https://cve.now/CVE-2011-4096.md): The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2011-4107](https://cve.now/CVE-2011-4107.md): The simplexml\_load\_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2011-4122](https://cve.now/CVE-2011-4122.md): Directory traversal vulnerability in openpam\_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.