2011 CVE Vulnerabilities

4,898 CVEs published in 2011.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2011-10034MEDIUM6.9AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file ha...
CVE-2011-10040MEDIUM5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used b...
CVE-2011-10039MEDIUM5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the Alert Heatmap report and the “...
CVE-2011-10038MEDIUM5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the recurring downtime script of t...
CVE-2011-10037MEDIUM5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of xiwindow variables...
CVE-2011-10036MEDIUM5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" ...
CVE-2011-10006MEDIUM6.1A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an un...
CVE-2011-4820MEDIUM4.3IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit ...
CVE-2011-4916MEDIUM5.5Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/t...
CVE-2011-4917MEDIUM5.5In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat.
CVE-2011-1762MEDIUM6.5A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when pub...
CVE-2011-1497MEDIUM6.1A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
CVE-2011-3656MEDIUM6.1Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to i...
CVE-2011-2863MEDIUM6.5Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially...
CVE-2011-2487MEDIUM5.9The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is...
CVE-2011-4538MEDIUM5.3Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords...
CVE-2011-4915MEDIUM5.5fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access t...
CVE-2011-2498MEDIUM5.5The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consum...
CVE-2011-2499MEDIUM6.1Mambo CMS through 4.6.5 has multiple XSS.
CVE-2011-4938MEDIUM6.1Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web scri...
CVE-2011-1086MEDIUM6.1Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitra...
CVE-2011-1084MEDIUM6.1A cross-site scripting (XSS) vulnerability in Smoothwall Express 3.
CVE-2011-1150MEDIUM6.1bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.
CVE-2011-1069MEDIUM6.1PHPShop through 0.8.1 has XSS.
CVE-2011-1009MEDIUM6.1Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.

Check if your code is affected by 2011 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now