CVE-2011-10043 | Critical | 9.8 | 2026-07-07 | Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded.
Module names starting with "::" could be passed to the load f… |
CVE-2011-10041 | | | 2026-01-15 | Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_upload.php due to missing file type valid… |
CVE-2011-10034 | | | 2025-11-12 | AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently… |
CVE-2011-10040 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages. Insufficient… |
CVE-2011-10039 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the Alert Heatmap report and the “My Reports” listing of the web interfac… |
CVE-2011-10038 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the recurring downtime script of the web interface. Insufficient validati… |
CVE-2011-10037 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of xiwindow variables used to build permalinks in the web in… |
CVE-2011-10036 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" JavaScript link. Insufficient validatio… |
CVE-2011-10035 | High | 7.0 | 2025-10-30 | Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-… |
CVE-2011-10033 | | | 2025-10-15 | The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when th… |
CVE-2011-20002 | High | 7.4 | 2025-10-14 | A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPL… |
CVE-2011-20001 | High | 7.5 | 2025-10-14 | A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPL… |
CVE-2011-10032 | | | 2025-08-30 | Sunway ForceControl version 6.1 SP3 and earlier contains a stack-based buffer overflow vulnerability in the SNMP NetDBServer service, which listens on TCP port… |
CVE-2011-10030 | | | 2025-08-20 | Foxit PDF Reader < 4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on di… |
CVE-2011-10029 | | | 2025-08-20 | Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the… |
CVE-2011-10028 | | | 2025-08-20 | The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.Proc… |
CVE-2011-10027 | | | 2025-08-20 | AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperl… |
CVE-2011-10026 | Critical | 9.8 | 2025-08-20 | Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows att… |
CVE-2011-10025 | | | 2025-08-20 | Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file is opened, the application converts inp… |
CVE-2011-10024 | | | 2025-08-20 | MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The… |
CVE-2011-10023 | | | 2025-08-20 | MJM QuickPlayer (also known as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file… |
CVE-2011-10022 | | | 2025-08-20 | SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. Th… |
CVE-2011-10021 | | | 2025-08-20 | Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe… |
CVE-2011-10020 | | | 2025-08-20 | Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a cli… |
CVE-2011-10019 | Critical | 9.8 | 2025-08-13 | Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitiz… |
CVE-2011-10018 | Critical | 9.8 | 2025-08-13 | myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP co… |
CVE-2011-10017 | | | 2025-08-13 | Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitiz… |
CVE-2011-10016 | | | 2025-08-13 | Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is… |
CVE-2011-10015 | | | 2025-08-13 | Cytel Studio version 9.0 and earlier is vulnerable to a stack-based buffer overflow triggered by parsing a malformed .CY3 file. The vulnerability occurs when t… |
CVE-2011-10014 | | | 2025-08-13 | GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configura… |
CVE-2011-10013 | | | 2025-08-13 | Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt exec… |
CVE-2011-10012 | | | 2025-08-13 | NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .d… |
CVE-2011-10011 | | | 2025-08-13 | WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is writte… |
CVE-2011-10010 | | | 2025-08-13 | QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated u… |
CVE-2011-10009 | | | 2025-08-13 | S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse… |
CVE-2011-10008 | | | 2025-07-31 | A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http… |
CVE-2011-10007 | High | 8.8 | 2025-06-05 | File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.
A file handle is opened with the… |
CVE-2011-10006 | Low | 3.5 | 2024-04-08 | A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.p… |
CVE-2011-10005 | Medium | 6.3 | 2024-01-16 | A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The mani… |
CVE-2011-10004 | Medium | 6.3 | 2023-10-17 | A vulnerability was found in reciply Plugin up to 1.1.7 on WordPress. It has been rated as critical. This issue affects some unknown processing of the file upl… |
CVE-2011-10003 | Medium | 5.5 | 2023-02-07 | A vulnerability was found in XpressEngine up to 1.4.4. It has been rated as critical. This issue affects some unknown processing of the component Update Query… |
CVE-2011-10002 | Medium | 5.5 | 2023-02-07 | A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the file labyrinth.inc.php. The manipulatio… |
CVE-2011-10001 | Medium | 5.5 | 2023-01-18 | A vulnerability was found in iamdroppy phoenixcf. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file cont… |
CVE-2011-4820 | Medium | 4.3 | 2022-09-29 | IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parame… |
CVE-2011-4916 | Medium | 5.5 | 2022-07-12 | Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. |
CVE-2011-4917 | Medium | 5.5 | 2022-04-18 | In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. |
CVE-2011-1762 | Medium | 6.5 | 2022-04-18 | A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user wi… |
CVE-2011-4574 | Critical | 9.8 | 2021-10-27 | PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high res… |
CVE-2011-4126 | High | 8.1 | 2021-10-27 | Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere. |
CVE-2011-4125 | Critical | 9.8 | 2021-10-27 | A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. |
CVE-2011-4124 | Critical | 9.8 | 2021-10-27 | Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges. |
CVE-2011-4119 | Critical | 9.8 | 2021-10-26 | caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install. |
CVE-2011-2195 | Critical | 9.8 | 2021-10-26 | A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php scrip… |
CVE-2011-1075 | Low | 3.7 | 2021-10-19 | FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In parti… |
CVE-2011-1497 | Medium | 6.1 | 2021-10-19 | A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6. |
CVE-2011-3656 | Medium | 6.1 | 2021-06-02 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2011-2863 | Medium | 6.5 | 2020-06-03 | Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process mem… |
CVE-2011-1805 | High | 8.8 | 2020-06-03 | Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2011-2487 | Medium | 5.9 | 2020-03-11 | The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack. |
CVE-2011-4538 | Medium | 5.3 | 2020-03-09 | Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings. |
CVE-2011-3269 | High | 7.5 | 2020-03-09 | Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email… |
CVE-2011-4915 | Medium | 5.5 | 2020-02-20 | fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts. |
CVE-2011-0699 | High | 7.0 | 2020-02-20 | Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-based buffer o… |
CVE-2011-2498 | Medium | 5.5 | 2020-02-20 | The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pa… |
CVE-2011-2054 | Medium | 4.3 | 2020-02-19 | A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authent… |
CVE-2011-4908 | Critical | 9.8 | 2020-02-12 | TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php. |
CVE-2011-4906 | Critical | 9.8 | 2020-02-12 | Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution. |
CVE-2011-3901 | High | 7.5 | 2020-02-12 | Android SQLite Journal before 4.0.1 has an information disclosure vulnerability. |
CVE-2011-3336 | High | 7.5 | 2020-02-12 | regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion. |
CVE-2011-2499 | Medium | 6.1 | 2020-02-12 | Mambo CMS through 4.6.5 has multiple XSS. |
CVE-2011-2343 | Low | 2.4 | 2020-02-12 | The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer. |
CVE-2011-4338 | High | 7.8 | 2020-02-12 | Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root p… |
CVE-2011-4661 | High | 7.5 | 2020-02-12 | A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Ci… |
CVE-2011-4938 | Medium | 6.1 | 2020-02-11 | Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter… |
CVE-2011-3642 | Critical | 9.6 | 2020-02-08 | Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and Mahara, allows rem… |
CVE-2011-1086 | Medium | 6.1 | 2020-02-07 | Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device pa… |
CVE-2011-1085 | High | 8.8 | 2020-02-07 | CSRF vulnerability in Smoothwall Express 3. |
CVE-2011-1084 | Medium | 6.1 | 2020-02-07 | A cross-site scripting (XSS) vulnerability in Smoothwall Express 3. |
CVE-2011-1597 | High | 8.8 | 2020-02-06 | OpenVAS Manager v2.0.3 allows plugin remote code execution. |
CVE-2011-1517 | Critical | 9.8 | 2020-02-05 | SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet… |
CVE-2011-1151 | Critical | 9.1 | 2020-02-05 | Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters. |
CVE-2011-1150 | Medium | 6.1 | 2020-02-05 | bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter. |
CVE-2011-1069 | Medium | 6.1 | 2020-02-05 | PHPShop through 0.8.1 has XSS. |
CVE-2011-1009 | Medium | 6.1 | 2020-02-05 | Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. |
CVE-2011-0525 | High | 8.8 | 2020-02-05 | Batavi before 1.0 has CSRF. |
CVE-2011-0220 | Medium | 5.5 | 2020-02-05 | Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet. |
CVE-2011-4912 | Medium | 5.3 | 2020-02-04 | Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass. |
CVE-2011-4937 | High | 7.5 | 2020-02-04 | Joomla! 1.7.1 has core information disclosure due to inadequate error checking. |
CVE-2011-3629 | High | 7.5 | 2020-02-04 | Joomla! core 1.7.1 allows information disclosure due to weak encryption |
CVE-2011-4117 | High | 7.5 | 2020-01-31 | The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files. |
CVE-2011-4116 | Low | 3.3 | 2020-01-31 | _is_safe in the File::Temp module for Perl does not properly handle symlinks. |
CVE-2011-4115 | High | 7.5 | 2020-01-31 | Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files. |
CVE-2011-4088 | High | 7.5 | 2020-01-31 | ABRT might allow attackers to obtain sensitive information from crash reports. |
CVE-2011-4558 | High | 7.2 | 2020-01-27 | Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters. |
CVE-2011-3622 | Medium | 6.1 | 2020-01-22 | A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. |
CVE-2011-3621 | Critical | 9.8 | 2020-01-22 | A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled. |
CVE-2011-3614 | Critical | 9.8 | 2020-01-22 | An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9. |
CVE-2011-3613 | High | 7.5 | 2020-01-22 | An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled. |
CVE-2011-3612 | High | 8.8 | 2020-01-22 | Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12. |
CVE-2011-3611 | High | 7.2 | 2020-01-22 | A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12. |