2011 CVE Vulnerabilities
4,899 CVEs published in 2011.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2011-4729 | — | — | 1.2% | Dec 16, 2011 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag in... |
| CVE-2011-4728 | — | — | 1.2% | Dec 16, 2011 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a co... |
| CVE-2011-4727 | — | — | 2.0% | Dec 16, 2011 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string dat... |
| CVE-2011-4726 | — | — | 0.9% | Dec 16, 2011 | Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_b... |
| CVE-2011-4725 | — | — | 1.1% | Dec 16, 2011 | Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build101111033... |
| CVE-2011-4837 | — | — | 2.1% | Dec 15, 2011 | Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote att... |
| CVE-2011-4836 | — | — | 1.7% | Dec 15, 2011 | Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject... |
| CVE-2011-4835 | — | — | 7.9% | Dec 15, 2011 | Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitr... |
| CVE-2011-4834 | — | — | 1.2% | Dec 15, 2011 | The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-U... |
| CVE-2011-4833 | — | — | 2.0% | Dec 15, 2011 | Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.... |
| CVE-2011-4832 | — | — | 2.8% | Dec 15, 2011 | Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allow... |
| CVE-2011-4831 | — | — | 2.7% | Dec 15, 2011 | Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to ... |
| CVE-2011-4830 | — | — | 1.4% | Dec 15, 2011 | Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Jooml... |
| CVE-2011-4829 | — | — | 1.1% | Dec 15, 2011 | SQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla! allows remote attacke... |
| CVE-2011-4828 | — | — | 65.5% | Dec 15, 2011 | Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta... |
| CVE-2011-4827 | — | — | 1.2% | Dec 15, 2011 | Multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrar... |
| CVE-2011-4826 | — | — | 1.2% | Dec 15, 2011 | SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL c... |
| CVE-2011-4825 | — | — | 40.9% | Dec 15, 2011 | Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym... |
| CVE-2011-4824 | — | — | 2.5% | Dec 15, 2011 | SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL co... |
| CVE-2011-4823 | — | — | 1.0% | Dec 15, 2011 | Multiple SQL injection vulnerabilities in Vik Real Estate (com_vikrealestate) component 1.0 for Joomla! allow remote att... |
| CVE-2011-4822 | — | — | 1.6% | Dec 15, 2011 | Multiple cross-site scripting (XSS) vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow ... |
| CVE-2011-4606 | — | — | 0.3% | Dec 15, 2011 | Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via ... |
| CVE-2011-4598 | — | — | 2.4% | Dec 15, 2011 | The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before... |
| CVE-2011-4597 | — | — | 3.3% | Dec 15, 2011 | The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8... |
| CVE-2011-4517 | — | — | 10.6% | Dec 15, 2011 | The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain s... |
Check if your code is affected by 2011 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now