# CVEs published 2011-12-17

7 CVEs were published on December 17, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4859](https://cve.now/CVE-2011-4859.md): The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771\* and 140CPU65\* modules, the Premium TSXETY\* and TSXP57\* mod (no CVSS)
- [CVE-2011-4860](https://cve.now/CVE-2011-4860.md): The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771\* module) gen (no CVSS)
- [CVE-2011-4861](https://cve.now/CVE-2011-4861.md): The modbus\_125\_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771\* module) (no CVSS)
- [CVE-2011-3339](https://cve.now/CVE-2011-3339.md): Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Senti (no CVSS)
- [CVE-2011-4141](https://cve.now/CVE-2011-4141.md): Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan ho (no CVSS)
- [CVE-2011-4602](https://cve.now/CVE-2011-4602.md): The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat s (no CVSS)
- [CVE-2011-4603](https://cve.now/CVE-2011-4603.md): The silc\_channel\_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UT (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.