2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-4285 | — | — | 1.9% | Jul 16, 2012 | The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, ... |
| CVE-2011-4284 | — | — | 2.1% | Jul 16, 2012 | Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile (aka My profile) bloc... |
| CVE-2011-4283 | — | — | 2.1% | Jul 16, 2012 | Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, whic... |
| CVE-2011-4282 | — | — | 1.8% | Jul 16, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodl... |
| CVE-2011-4281 | — | — | 1.0% | Jul 16, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack... |
| CVE-2011-4280 | — | — | 3.6% | Jul 16, 2012 | Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.... |
| CVE-2011-4279 | — | — | 1.4% | Jul 16, 2012 | Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes... |
| CVE-2011-4278 | — | — | 1.8% | Jul 16, 2012 | Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x b... |
| CVE-2011-4133 | — | — | 1.0% | Jul 16, 2012 | Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the auth... |
| CVE-2011-4309 | — | — | 1.4% | Jul 11, 2012 | Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perf... |
| CVE-2011-4308 | — | — | 1.7% | Jul 11, 2012 | mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated... |
| CVE-2011-4307 | — | — | 1.2% | Jul 11, 2012 | Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.... |
| CVE-2011-4306 | — | — | 1.8% | Jul 11, 2012 | Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenti... |
| CVE-2011-4305 | — | — | 1.9% | Jul 11, 2012 | message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infini... |
| CVE-2011-4304 | — | — | 1.7% | Jul 11, 2012 | The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover... |
| CVE-2011-4303 | — | — | 1.2% | Jul 11, 2012 | lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret... |
| CVE-2011-4302 | — | — | 1.3% | Jul 11, 2012 | mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not proper... |
| CVE-2011-4301 | — | — | 2.1% | Jul 11, 2012 | The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, an... |
| CVE-2011-4300 | — | — | 2.1% | Jul 11, 2012 | The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to cate... |
| CVE-2011-4299 | — | — | 1.2% | Jul 11, 2012 | Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 all... |
| CVE-2011-4298 | — | — | 1.0% | Jul 11, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.... |
| CVE-2011-5096 | — | — | 3.9% | Jul 3, 2012 | Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (f... |
| CVE-2011-4029 | — | — | 0.6% | Jul 3, 2012 | The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arb... |
| CVE-2011-4028 | — | — | 0.4% | Jul 3, 2012 | The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of ar... |
| CVE-2011-4127 | — | — | 0.6% | Jul 3, 2012 | The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended ... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now