2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-5286 | — | — | 3.0% | Jan 1, 2015 | SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows re... |
| CVE-2011-5285 | — | — | 1.0% | Jan 1, 2015 | Multiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web scri... |
| CVE-2011-5284 | — | — | 2.3% | Dec 31, 2014 | Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothw... |
| CVE-2011-5283 | — | — | 3.2% | Dec 31, 2014 | Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Expre... |
| CVE-2011-2727 | — | — | 1.5% | Dec 30, 2014 | The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts ... |
| CVE-2011-4722 | — | — | 57.6% | Dec 28, 2014 | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read a... |
| CVE-2011-4720 | — | — | 2.7% | Dec 28, 2014 | Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename i... |
| CVE-2011-3623 | — | — | 4.3% | Dec 26, 2014 | Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitr... |
| CVE-2011-3592 | — | — | 1.4% | Dec 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x... |
| CVE-2011-3591 | — | — | 1.4% | Dec 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to... |
| CVE-2011-1798 | — | — | 1.1% | Dec 26, 2014 | rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cas... |
| CVE-2011-1796 | — | — | 1.1% | Dec 26, 2014 | Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCor... |
| CVE-2011-1795 | — | — | 1.1% | Dec 26, 2014 | Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in... |
| CVE-2011-1794 | — | — | 1.1% | Dec 26, 2014 | Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG f... |
| CVE-2011-1793 | — | — | 1.1% | Dec 26, 2014 | rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attacke... |
| CVE-2011-2702 | — | — | 8.5% | Oct 27, 2014 | Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions ... |
| CVE-2011-4953 | — | — | 2.2% | Oct 27, 2014 | The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitr... |
| CVE-2011-4104 | — | — | 2.4% | Oct 27, 2014 | The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which a... |
| CVE-2011-4103 | — | — | 2.4% | Oct 27, 2014 | emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows... |
| CVE-2011-4624 | — | — | 7.1% | Oct 1, 2014 | Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.5... |
| CVE-2011-4887 | — | — | 1.3% | Sep 11, 2014 | Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Im... |
| CVE-2011-2944 | — | — | 2.7% | Aug 12, 2014 | SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitra... |
| CVE-2011-2593 | — | — | 4.0% | Aug 12, 2014 | Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise ... |
| CVE-2011-1381 | — | — | 1.2% | Jun 27, 2014 | Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended ac... |
| CVE-2011-4821 | — | — | 2.1% | Jun 20, 2014 | Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA al... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now