Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
May

CVEs published in May 2011

309 vulnerabilities, 65 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

smartertools smarterstatsThe SmarterTools SmarterStats 6.0 web server generates web pages containing external links in...CVE-2011-21525.0 MediumMay 20, 2011
smartertools smarterstatsThe (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite...CVE-2011-21515.0 MediumMay 20, 2011
smartertools smarterstatsThe SmarterTools SmarterStats 6.0 web server does not properly validate string data that is...CVE-2011-21505.0 MediumMay 20, 2011
smartertools smarterstatsMultiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow...CVE-2011-21497.5 HighMay 20, 2011
smartertools smarterstatsAdmin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to...CVE-2011-214810.0 HighMay 20, 2011
openswanOpenswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to...CVE-2011-21473.6 LowMay 20, 2011
tibco iprocess engine, iprocess workspace +1 moreSession fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace...CVE-2011-20214.3 MediumMay 20, 2011
tibco iprocess engine, iprocess workspace +1 moreCross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess...CVE-2011-20204.3 MediumMay 20, 2011
twikiMultiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2...CVE-2011-1838Public exploit4.3 MediumMay 20, 2011
keepalivedThe pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666...CVE-2011-1784Fix available3.6 LowMay 20, 2011
apache tomcatAccess restriction bypass in Apache TomcatCVE-2011-1582Fix available4.3 MediumMay 20, 2011
trendmicro trend micro internet securityThe Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and...CVE-2011-13272.1 LowMay 20, 2011
cisco ciscoworks common servicesDirectory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco...CVE-2011-0966Public exploitEPSS 41.3%6.8 MediumMay 20, 2011
cisco unified operations managerCross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in...CVE-2011-0962Public exploit4.3 MediumMay 20, 2011
cisco ciscoworks common servicesCross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco...CVE-2011-0961Public exploit4.3 MediumMay 20, 2011
cisco unified operations managerMultiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6...CVE-2011-0960Public exploit7.5 HighMay 20, 2011
cisco unified operations managerMultiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM)...CVE-2011-0959Public exploitEPSS 21.5%4.3 MediumMay 20, 2011
ffmpeg, mplayer +1 moreFFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of...CVE-2011-0723Fix available6.8 MediumMay 20, 2011
ffmpeg, mplayerhq mplayer +1 moreFFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a...CVE-2011-0722Fix available6.8 MediumMay 20, 2011
ffmpeg, mplayerhq mplayer +1 moreFFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a...CVE-2010-3908Fix available6.8 MediumMay 20, 2011
zeacom chat serverZeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which...CVE-2010-02175.8 MediumMay 20, 2011
monkeysaudio monkey\'s audioMonkey's Audio before 4.02 allows remote attackers to cause a denial of service (application...CVE-2009-50754.3 MediumMay 20, 2011
monkeysaudio monkey\'s audioMonkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application...CVE-2006-72454.3 MediumMay 20, 2011
ibm datacap taskmaster captureThe eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and...CVE-2011-21445.0 MediumMay 16, 2011
ibm datacap taskmaster captureIBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows...CVE-2011-21436.8 MediumMay 16, 2011
ibm datacap taskmaster captureThe Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext...CVE-2011-21425.0 MediumMay 16, 2011
ibm datacap taskmaster captureSQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows...CVE-2011-21417.5 HighMay 16, 2011
hp business availability centerCross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and...CVE-2011-18564.3 MediumMay 16, 2011
evan dandrea usb-creatorusb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit...CVE-2011-18282.1 LowMay 16, 2011
ca ehealthMultiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2...CVE-2011-18994.3 MediumMay 16, 2011
google chromeMultiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google...CVE-2011-18007.5 HighMay 16, 2011
google chrome, debian linux +1 moreGoogle Chrome before 11.0.696.68 does not properly perform casts of variables during interaction...CVE-2011-17996.8 MediumMay 16, 2011
adobe auditionMultiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute...CVE-2011-06159.3 HighMay 16, 2011
adobe auditionBuffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of...CVE-2011-0614Public exploitEPSS 13.7%9.3 HighMay 16, 2011
adobe robohelp, robohelp server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7...CVE-2011-06134.3 MediumMay 16, 2011
adobe flash media serverAdobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to...CVE-2011-06125.0 MediumMay 16, 2011
apache http server, apr-util +1 moreThe fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3...CVE-2011-1928Fix availableEPSS 10.3%4.3 MediumMay 15, 2011
apache http server, portable runtime, apple mac os x +7 more +9 moreStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...CVE-2011-0419Public exploitFix availableEPSS 30.4%4.3 MediumMay 15, 2011
maharaMahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting,...CVE-2011-14064.3 MediumMay 13, 2011
maharaCross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users...CVE-2011-14053.5 LowMay 13, 2011
maharaMahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows...CVE-2011-14044.0 MediumMay 13, 2011
maharaCross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1...CVE-2011-14036.8 MediumMay 13, 2011
maharaMahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and...CVE-2011-14026.5 MediumMay 13, 2011
fon la fonera\+, la fonera\+ firmware +1 moreUnspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote...CVE-2011-13266.1 MediumMay 13, 2011
gisle aas libwww-perlThe Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent...CVE-2011-0633Fix available4.3 MediumMay 13, 2011
adobe flash playerAdobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3...CVE-2011-06279.3 HighMay 13, 2011
adobe flash playerAdobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3...CVE-2011-06269.3 HighMay 13, 2011
adobe flash playerAdobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3...CVE-2011-06259.3 HighMay 13, 2011
adobe flash playerAdobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3...CVE-2011-06249.3 HighMay 13, 2011
adobe flash playerAdobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3...CVE-2011-06239.3 HighMay 13, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open