2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-4203 | — | — | 1.1% | Dec 22, 2011 | CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2... |
| CVE-2011-4037 | — | — | 4.7% | Dec 22, 2011 | Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote a... |
| CVE-2011-3666 | — | — | 1.0% | Dec 21, 2011 | Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable file... |
| CVE-2011-3665 | — | — | 2.6% | Dec 21, 2011 | Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a... |
| CVE-2011-3664 | — | — | 1.4% | Dec 21, 2011 | Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain ... |
| CVE-2011-3663 | — | — | 2.1% | Dec 21, 2011 | Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture... |
| CVE-2011-3661 | — | — | 3.7% | Dec 21, 2011 | YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote a... |
| CVE-2011-3660 | — | — | 4.4% | Dec 21, 2011 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8... |
| CVE-2011-3658 | — | — | 69.9% | Dec 21, 2011 | The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAtt... |
| CVE-2011-4779 | — | — | — | Dec 20, 2011 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4642. Reason: This candidate is a reservation ... |
| CVE-2011-4869 | — | — | 3.1% | Dec 20, 2011 | validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, whic... |
| CVE-2011-4723 | MEDIUM | 5.7 | 3.1% | Dec 20, 2011 | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive infor... |
| CVE-2011-4717 | — | — | 2.2% | Dec 20, 2011 | Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary dir... |
| CVE-2011-4528 | — | — | 2.9% | Dec 20, 2011 | Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zon... |
| CVE-2011-4861 | — | — | 3.2% | Dec 17, 2011 | The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum... |
| CVE-2011-4860 | — | — | 2.8% | Dec 17, 2011 | The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 14... |
| CVE-2011-4859 | — | — | 4.0% | Dec 17, 2011 | The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSX... |
| CVE-2011-4603 | — | — | 3.7% | Dec 17, 2011 | The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not per... |
| CVE-2011-4602 | — | — | 3.7% | Dec 17, 2011 | The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat ... |
| CVE-2011-4141 | — | — | 2.0% | Dec 17, 2011 | Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privil... |
| CVE-2011-3339 | — | — | 1.5% | Dec 17, 2011 | Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earl... |
| CVE-2011-4857 | — | — | 4.9% | Dec 16, 2011 | Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary ... |
| CVE-2011-4369 | — | — | 7.6% | Dec 16, 2011 | Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and... |
| CVE-2011-3834 | — | — | 5.2% | Dec 16, 2011 | Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary c... |
| CVE-2011-4856 | — | — | 1.8% | Dec 16, 2011 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain reso... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now