# CVEs published 2011-12-05

8 CVEs were published on December 5, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1932](https://cve.now/CVE-2011-1932.md): Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrar (no CVSS)
- [CVE-2011-2397](https://cve.now/CVE-2011-2397.md): The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request th (no CVSS)
- [CVE-2011-4051](https://cve.now/CVE-2011-4051.md): CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which (no CVSS)
- [CVE-2011-4052](https://cve.now/CVE-2011-4052.md): Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows r (no CVSS)
- [CVE-2011-4162](https://cve.now/CVE-2011-4162.md): The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect (no CVSS)
- [CVE-2011-4356](https://cve.now/CVE-2011-4356.md): Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of th (no CVSS, celery)
- [CVE-2011-4543](https://cve.now/CVE-2011-4543.md): Multiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to include and execute arbitrary local files via a . (no CVSS)
- [CVE-2011-4675](https://cve.now/CVE-2011-4675.md): The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (tilde) characters to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.