# CVEs published 2011-12-02

12 CVEs were published on December 2, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4671](https://cve.now/CVE-2011-4671.md): SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows (no CVSS)
- [CVE-2011-4672](https://cve.now/CVE-2011-4672.md): Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the Se (no CVSS)
- [CVE-2011-4673](https://cve.now/CVE-2011-4673.md): SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2011-4674](https://cve.now/CVE-2011-4674.md): SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to exe (no CVSS)
- [CVE-2011-4669](https://cve.now/CVE-2011-4669.md): SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to exec (no CVSS)
- [CVE-2011-4670](https://cve.now/CVE-2011-4670.md): Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2011-4033](https://cve.now/CVE-2011-4033.md): Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 (no CVSS)
- [CVE-2011-4034](https://cve.now/CVE-2011-4034.md): Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 (no CVSS)
- [CVE-2011-4035](https://cve.now/CVE-2011-4035.md): Cross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and Citec (no CVSS)
- [CVE-2011-4036](https://cve.now/CVE-2011-4036.md): Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAR (no CVSS)
- [CVE-2011-4545](https://cve.now/CVE-2011-4545.md): CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and co (no CVSS)
- [CVE-2011-4668](https://cve.now/CVE-2011-4668.md): IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.