Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
April

CVEs published in April 2011

330 vulnerabilities, 59 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

sambasmbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file...CVE-2011-1678Fix available3.3 LowApril 10, 2011
linux util-linuxmount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed...CVE-2011-1677Fix available4.6 MediumApril 10, 2011
linux util-linuxmount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed...CVE-2011-16763.3 LowApril 10, 2011
linux util-linuxmount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first...CVE-2011-1675Fix available3.3 LowApril 10, 2011
netgear prosafe wnap210, prosafe wnap210 firmware +1 moreThe NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication...CVE-2011-16746.8 MediumApril 10, 2011
netgear prosafe wnap210, prosafe wnap210 firmware +1 moreBackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the...CVE-2011-16735.0 MediumApril 10, 2011
dell kace k2000 systems deployment applianceThe Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS...CVE-2011-16725.0 MediumApril 10, 2011
gnu glibclocale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not...CVE-2011-1095Fix available6.2 MediumApril 10, 2011
gnu glibcThe addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report...CVE-2011-1089Fix available3.3 LowApril 10, 2011
novell file reporterStack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows...CVE-2011-0994EPSS 17.9%10.0 HighApril 10, 2011
pwhois layer four tracerouteUnspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows...CVE-2011-07657.2 HighApril 10, 2011
getontracks tracksCross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2,...CVE-2011-1671Public exploit4.3 MediumApril 10, 2011
a.kulikov interra blog machineCross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and...CVE-2011-1670Public exploit4.3 MediumApril 10, 2011
mikoviny wp custom pagesDirectory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for...CVE-2011-1669Public exploitEPSS 22.2%5.0 MediumApril 10, 2011
awcm-cms ar web content managerCross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2,...CVE-2011-1668Public exploit4.3 MediumApril 10, 2011
xmedien anzeigenmarktSQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute...CVE-2011-1667Public exploit7.5 HighApril 10, 2011
metaways tineMetaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in ...CVE-2011-16665.0 MediumApril 10, 2011
phpboostPHPBoost 3.0 stores sensitive information under the web root with insufficient access control,...CVE-2011-1665Public exploit5.0 MediumApril 10, 2011
icanlocalize translation managementCross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6...CVE-2011-16646.8 MediumApril 10, 2011
icanlocalize translation managementSQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal...CVE-2011-16637.5 HighApril 10, 2011
icanlocalize translation managementCross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for...CVE-2011-16624.3 MediumApril 10, 2011
nicholas thompson node quick findThe Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node...CVE-2011-16615.0 MediumApril 10, 2011
grapecity data dynamics reportsMultiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library...CVE-2011-16604.3 MediumApril 10, 2011
linux kernel, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not...CVE-2011-11632.1 LowApril 10, 2011
novell opensuse build serviceThe API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows...CVE-2011-04666.4 MediumApril 10, 2011
linux kernel, canonical ubuntu linux +1 moreThe ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 ...CVE-2011-04632.1 LowApril 10, 2011
novell opensuse build serviceMultiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in...CVE-2011-04624.3 MediumApril 10, 2011
gitoliteDirectory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before...CVE-2011-1572Fix available6.8 MediumApril 9, 2011
gnu glibcInteger overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier...CVE-2011-1659Fix available5.0 MediumApril 8, 2011
gnu glibcld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic...CVE-2011-16583.7 LowApril 8, 2011
roundcube webmailsteps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request...CVE-2011-1492Fix available5.5 MediumApril 8, 2011
roundcube webmailThe login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly...CVE-2011-1491Fix available3.5 LowApril 8, 2011
apache tomcatApache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote UsersCVE-2011-1475Public exploitFix available5.0 MediumApril 8, 2011
apache tomcatAccess controll bypass in Apache TomcatCVE-2011-1183Fix available5.8 MediumApril 8, 2011
gnu eglibc, glibc +1 moreThe GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context...CVE-2011-1071Public exploitFix availableEPSS 14.3%5.1 MediumApril 8, 2011
isc dhcp, canonical ubuntu linux, debian linux +2 moredhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV...CVE-2011-0997Fix availableEPSS 84.6%7.5 HighApril 8, 2011
gnu glibc, redhat enterprise linux +1 moreMultiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of...CVE-2011-0536Public exploit6.9 MediumApril 8, 2011
ikiwikiikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during...CVE-2011-1401Fix available3.5 LowApril 8, 2011
matthias hopf xrdb, x x11 +1 morexrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute...CVE-2011-0465Fix available9.3 HighApril 8, 2011
phpwebscripts easy banner freeMultiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05...CVE-2010-4784Public exploit6.8 MediumApril 7, 2011
phpwebscripts easy banner freeMultiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner...CVE-2010-4783Public exploit2.6 LowApril 7, 2011
softwebsnepal ananda real estateMultiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey)...CVE-2010-4782Public exploit7.5 HighApril 7, 2011
enanocms enano cmsindex.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2...CVE-2010-4781Public exploit5.0 MediumApril 7, 2011
enanocms enano cmsSQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1...CVE-2010-4780Public exploit7.5 HighApril 7, 2011
bravenewcode wptouchCross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9...CVE-2010-47794.3 MediumApril 7, 2011
nicholas marriott tmuxtmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp...CVE-2011-1496Public exploitFix available4.6 MediumApril 7, 2011
microsoft windows 7** DISPUTED ** The default configuration of Microsoft Windows 7 immediately prefers a new IPv6...CVE-2011-1652DisputedEPSS 12.3%5.0 MediumApril 6, 2011
hp network node manager iUnspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x and 8.1x allows remote...CVE-2011-08954.0 MediumApril 6, 2011
realnetworks realplayerHeap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0...CVE-2011-1525Public exploitEPSS 11.9%9.3 HighApril 6, 2011
douran portaldownload.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary...CVE-2011-1569Public exploit5.0 MediumApril 5, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open