2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-4300 | — | — | 2.1% | Jul 11, 2012 | The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to cate... |
| CVE-2011-4299 | — | — | 1.2% | Jul 11, 2012 | Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 all... |
| CVE-2011-4298 | — | — | 1.0% | Jul 11, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.... |
| CVE-2011-5096 | — | — | 3.9% | Jul 3, 2012 | Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (f... |
| CVE-2011-4029 | — | — | 0.6% | Jul 3, 2012 | The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arb... |
| CVE-2011-4028 | — | — | 0.4% | Jul 3, 2012 | The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of ar... |
| CVE-2011-4127 | — | — | 0.6% | Jul 3, 2012 | The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended ... |
| CVE-2011-4086 | — | — | 0.4% | Jul 3, 2012 | The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the... |
| CVE-2011-2716 | — | — | 1.8% | Jul 3, 2012 | The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell met... |
| CVE-2011-2485 | — | — | 3.1% | Jul 3, 2012 | The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle cert... |
| CVE-2011-4957 | — | — | 3.2% | Jun 27, 2012 | The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before ... |
| CVE-2011-4956 | — | — | 2.5% | Jun 27, 2012 | Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web scrip... |
| CVE-2011-4940 | — | — | 3.2% | Jun 27, 2012 | The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 ... |
| CVE-2011-4914 | — | — | 8.8% | Jun 21, 2012 | The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are c... |
| CVE-2011-4913 | — | — | 4.2% | Jun 21, 2012 | The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_... |
| CVE-2011-4324 | — | — | 0.5% | Jun 21, 2012 | The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a den... |
| CVE-2011-1493 | — | — | 3.4% | Jun 21, 2012 | Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows r... |
| CVE-2011-1479 | — | — | 0.8% | Jun 21, 2012 | Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denia... |
| CVE-2011-1477 | — | — | 0.4% | Jun 21, 2012 | Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of... |
| CVE-2011-1476 | — | — | 0.4% | Jun 21, 2012 | Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 plat... |
| CVE-2011-1160 | — | — | 0.5% | Jun 21, 2012 | The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, ... |
| CVE-2011-1080 | — | — | 0.4% | Jun 21, 2012 | The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a cert... |
| CVE-2011-1079 | — | — | 0.7% | Jun 21, 2012 | The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certa... |
| CVE-2011-1078 | — | — | 0.4% | Jun 21, 2012 | The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a cert... |
| CVE-2011-1023 | — | — | 0.5% | Jun 21, 2012 | The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map ... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now