2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-0678 | — | — | 9.2% | Jan 28, 2011 | Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attacke... |
| CVE-2011-0275 | — | — | 4.2% | Jan 28, 2011 | Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to cause a d... |
| CVE-2011-0652 | — | — | 0.7% | Jan 28, 2011 | lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (cras... |
| CVE-2011-0651 | — | — | 4.9% | Jan 28, 2011 | Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attacker... |
| CVE-2011-0650 | — | — | 1.1% | Jan 28, 2011 | Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attac... |
| CVE-2011-0520 | — | — | 5.2% | Jan 28, 2011 | The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows ... |
| CVE-2011-0343 | — | — | 0.4% | Jan 28, 2011 | Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operat... |
| CVE-2011-0048 | — | — | 1.8% | Jan 28, 2011 | Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates a clickable link for a ... |
| CVE-2011-0046 | — | — | 1.1% | Jan 28, 2011 | Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before ... |
| CVE-2011-0018 | — | — | 9.3% | Jan 28, 2011 | The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authent... |
| CVE-2011-0646 | — | — | 1.0% | Jan 25, 2011 | SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands vi... |
| CVE-2011-0645 | — | — | 1.0% | Jan 25, 2011 | SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via ... |
| CVE-2011-0644 | — | — | 1.0% | Jan 25, 2011 | SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute ... |
| CVE-2011-0643 | — | — | 1.0% | Jan 25, 2011 | Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows ... |
| CVE-2011-0642 | — | — | 0.9% | Jan 25, 2011 | Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers... |
| CVE-2011-0641 | — | — | 1.8% | Jan 25, 2011 | Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress ... |
| CVE-2011-0021 | — | — | 5.8% | Jan 25, 2011 | Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote ... |
| CVE-2011-0009 | — | — | 1.9% | Jan 25, 2011 | Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, whic... |
| CVE-2011-0640 | — | — | 0.4% | Jan 25, 2011 | The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID... |
| CVE-2011-0639 | — | — | 0.3% | Jan 25, 2011 | Apple Mac OS X does not properly warn the user before enabling additional Human Interface Device (HID) functionality ove... |
| CVE-2011-0638 | — | — | 1.4% | Jan 25, 2011 | Microsoft Windows does not properly warn the user before enabling additional Human Interface Device (HID) functionality ... |
| CVE-2011-0637 | — | — | 0.4% | Jan 25, 2011 | The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which ... |
| CVE-2011-0273 | — | — | 13.4% | Jan 25, 2011 | Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute ar... |
| CVE-2011-0410 | — | — | 1.9% | Jan 24, 2011 | CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which m... |
| CVE-2011-0352 | — | — | 2.2% | Jan 24, 2011 | Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 al... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now