Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
May

CVEs published in May 2011

309 vulnerabilities, 65 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

openbsdMultiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow...CVE-2011-21685.0 MediumMay 24, 2011
dovecotscript-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting,...CVE-2011-2167Fix available6.5 MediumMay 24, 2011
dovecotscript-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration...CVE-2011-2166Fix available6.5 MediumMay 24, 2011
dovecotlib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not...CVE-2011-1929Fix available5.0 MediumMay 24, 2011
rdesktopDirectory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0,...CVE-2011-1595Fix available4.3 MediumMay 24, 2011
pythonThe urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location...CVE-2011-1521Fix available6.4 MediumMay 24, 2011
emc sourceone email managementThe default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6...CVE-2011-14243.5 LowMay 24, 2011
radvision iview suiteSQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to...CVE-2011-13287.5 HighMay 24, 2011
netbsd, pureftpd pure-ftpd +1 moreThe glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly...CVE-2011-0418Public exploitFix available4.0 MediumMay 24, 2011
qemuThe pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm...CVE-2011-1751Fix available7.4 HighMay 24, 2011
watchguard xcsThe STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O...CVE-2011-2165Public exploit6.8 MediumMay 23, 2011
cmu cyrus imap serverThe STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O...CVE-2011-1926Fix available5.1 MediumMay 23, 2011
ihji pmake, netbsd +1 moreThe make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow...CVE-2011-1920Fix available3.3 LowMay 23, 2011
mediawikiincludes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not...CVE-2011-17665.8 MediumMay 23, 2011
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or...CVE-2011-17654.3 MediumMay 23, 2011
pureftpd pure-ftpdThe STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict...CVE-2011-1575Public exploitFix availableEPSS 33.3%5.8 MediumMay 23, 2011
viewvcViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting,...CVE-2009-50245.0 MediumMay 23, 2011
linux kernel, novell suse linux enterprise server +1 moreThe rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not...CVE-2011-49137.8 HighMay 23, 2011
linux kernel, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check...CVE-2011-17766.1 MediumMay 23, 2011
linux kernel, fedoraproject fedora +1 moreInteger underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel...CVE-2011-17707.5 HighMay 23, 2011
linux kernelnet/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module,...CVE-2011-17675.4 MediumMay 23, 2011
linux kernelInteger overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the...CVE-2011-17596.2 MediumMay 23, 2011
linux kernel, suse linux enterprise server +1 moreThe cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not...CVE-2011-15853.3 LowMay 23, 2011
linux kernelArray index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel...CVE-2011-14937.5 HighMay 23, 2011
linux kernelThe napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation...CVE-2011-14785.7 MediumMay 23, 2011
linux kernel, suse linux enterprise desktop +1 moreMultiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local...CVE-2011-14777.2 HighMay 23, 2011
linux kernelInteger underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on...CVE-2011-14764.0 MediumMay 23, 2011
linux kernel, redhat enterprise linux, enterprise linux aus +4 more +6 morekernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of...CVE-2011-11823.6 LowMay 23, 2011
linux kernelMultiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net...CVE-2011-11809.8 CriticalMay 23, 2011
linux kernelThe econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the...CVE-2011-11735.0 MediumMay 23, 2011
linux kernelnet/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does...CVE-2011-11722.1 LowMay 23, 2011
linux kernelnet/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does...CVE-2011-11712.1 LowMay 23, 2011
linux kernelnet/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does...CVE-2011-11702.1 LowMay 23, 2011
linux kernelThe tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not...CVE-2011-11602.1 LowMay 23, 2011
linux kernelThe do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does...CVE-2011-10802.1 LowMay 23, 2011
linux kernelThe bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does...CVE-2011-10795.4 MediumMay 23, 2011
linux kernelThe sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39...CVE-2011-10781.9 LowMay 23, 2011
linux kernelThe do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not...CVE-2011-07262.1 LowMay 23, 2011
adobe photoshopMultiple unspecified vulnerabilities in Adobe Photoshop before 12.0.4 have unknown impact and...CVE-2011-216410.0 HighMay 20, 2011
ibm systems director, virtualization manager +1 moreUnspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has...CVE-2011-21639.3 HighMay 20, 2011
ffmpeg, mandriva corporate server, enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and...CVE-2011-2162Fix available10.0 HighMay 20, 2011
ffmpegThe ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer,...CVE-2011-2161Fix available4.3 MediumMay 20, 2011
ffmpeg, mplayerhq mplayer +1 moreThe VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products,...CVE-2011-2160Fix available9.3 HighMay 20, 2011
smartertools smarterstatsThe SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources,...CVE-2011-215910.0 HighMay 20, 2011
smartertools smarterstatsThe SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain...CVE-2011-215810.0 HighMay 20, 2011
smartertools smarterstatsThe (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the...CVE-2011-21575.0 MediumMay 20, 2011
smartertools smarterstatsThe SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings...CVE-2011-21565.0 MediumMay 20, 2011
smartertools smarterstatsLogin.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword...CVE-2011-21557.5 HighMay 20, 2011
smartertools smarterstatslogin.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in...CVE-2011-21545.0 MediumMay 20, 2011
smartertools smarterstatsLogin.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and...CVE-2011-21535.0 MediumMay 20, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open