# CVEs published 2011-11-30

10 CVEs were published on November 30, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4646](https://cve.now/CVE-2011-4646.md): SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordP (no CVSS)
- [CVE-2011-4647](https://cve.now/CVE-2011-4647.md): Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2009-5028](https://cve.now/CVE-2009-5028.md): Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service (daemon crash) or possibly execute (no CVSS)
- [CVE-2011-3173](https://cve.now/CVE-2011-3173.md): Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 (aka OE (no CVSS)
- [CVE-2011-3639](https://cve.now/CVE-2011-3639.md): The mod\_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, do (no CVSS)
- [CVE-2011-4002](https://cve.now/CVE-2011-4002.md): HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command (no CVSS)
- [CVE-2011-4191](https://cve.now/CVE-2011-4191.md): Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2011-4317](https://cve.now/CVE-2011-4317.md): The mod\_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 11792 (no CVSS)
- [CVE-2011-4345](https://cve.now/CVE-2011-4345.md): Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject a (no CVSS)
- [CVE-2011-4542](https://cve.now/CVE-2011-4542.md): Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs\[\] parameter in a mailbox Draf (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.