2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-5068 | — | — | 0.7% | Jan 29, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote atta... |
| CVE-2011-5067 | — | — | 1.0% | Jan 29, 2012 | move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive... |
| CVE-2011-3833 | — | — | 19.8% | Jan 29, 2012 | Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote ... |
| CVE-2011-3832 | — | — | 1.4% | Jan 29, 2012 | Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated admin... |
| CVE-2011-3831 | — | — | 1.8% | Jan 29, 2012 | SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attack... |
| CVE-2011-3830 | — | — | 1.2% | Jan 29, 2012 | Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attacke... |
| CVE-2011-3829 | — | — | 17.9% | Jan 29, 2012 | ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive in... |
| CVE-2011-4622 | — | — | 0.4% | Jan 27, 2012 | The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle w... |
| CVE-2011-4608 | — | — | 3.2% | Jan 27, 2012 | mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitr... |
| CVE-2011-4330 | — | — | 0.4% | Jan 27, 2012 | Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to ... |
| CVE-2011-4325 | — | — | 0.4% | Jan 27, 2012 | The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain d... |
| CVE-2011-4314 | — | — | 3.2% | Jan 27, 2012 | message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before... |
| CVE-2011-4132 | — | — | 0.5% | Jan 27, 2012 | The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows loca... |
| CVE-2011-4110 | — | — | 0.5% | Jan 27, 2012 | The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of... |
| CVE-2011-4077 | — | — | 0.6% | Jan 27, 2012 | Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DE... |
| CVE-2011-3874 | — | — | 12.5% | Jan 27, 2012 | Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted r... |
| CVE-2011-3626 | — | — | 2.2% | Jan 27, 2012 | Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 a... |
| CVE-2011-2203 | — | — | 0.4% | Jan 27, 2012 | The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer derefer... |
| CVE-2011-1162 | — | — | 0.4% | Jan 27, 2012 | The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the ... |
| CVE-2011-4354 | — | — | 4.0% | Jan 27, 2012 | crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circ... |
| CVE-2011-4143 | — | — | 1.2% | Jan 27, 2012 | EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about envir... |
| CVE-2011-1941 | — | — | 2.0% | Jan 26, 2012 | Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redire... |
| CVE-2011-1940 | — | — | 1.3% | Jan 26, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow rem... |
| CVE-2011-4276 | — | — | 0.6% | Jan 25, 2012 | The Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3.6 allows remote attacke... |
| CVE-2011-4123 | — | — | — | Jan 25, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-3874. Reason: This candidate is a duplicate of... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now