2011 CVE Vulnerabilities

4,898 CVEs published in 2011.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2011-3336HIGH7.5regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
CVE-2011-4338HIGH7.8Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in sham...
CVE-2011-4661HIGH7.5A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (a...
CVE-2011-1085HIGH8.8CSRF vulnerability in Smoothwall Express 3.
CVE-2011-1597HIGH8.8OpenVAS Manager v2.0.3 allows plugin remote code execution.
CVE-2011-0525HIGH8.8Batavi before 1.0 has CSRF.
CVE-2011-4937HIGH7.5Joomla! 1.7.1 has core information disclosure due to inadequate error checking.
CVE-2011-3629HIGH7.5Joomla! core 1.7.1 allows information disclosure due to weak encryption
CVE-2011-4117HIGH7.5The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files.
CVE-2011-4115HIGH7.5Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files.
CVE-2011-4088HIGH7.5ABRT might allow attackers to obtain sensitive information from crash reports.
CVE-2011-4558HIGH7.2Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and re...
CVE-2011-3613HIGH7.5An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled.
CVE-2011-3612HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
CVE-2011-3611HIGH7.2A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
CVE-2011-3582HIGH8.8A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequa...
CVE-2011-4322HIGH7.5websitebaker prior to and including 2.8.1 has an authentication error in backup module.
CVE-2011-2668HIGH8.8Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header
CVE-2011-2934HIGH8.8A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlie...
CVE-2011-2933HIGH7.2An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failu...
CVE-2011-5247HIGH7.5Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
CVE-2011-2480HIGH7.5Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain no...
CVE-2011-2187HIGH7.8xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS ...
CVE-2011-2177HIGH7.8OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite ...
CVE-2011-4310HIGH7.5The news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles.

Check if your code is affected by 2011 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now