# Vulnerabilities published in 2011


- [CVE-2011-4213](https://insights.sbomify.com/CVE-2011-4213/): The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local (high 7.2)
- [CVE-2011-4212](https://insights.sbomify.com/CVE-2011-4212/): Command injection in n/a (high 7.2)
- [CVE-2011-4211](https://insights.sbomify.com/CVE-2011-4211/): Security feature bypass in n/a (high 7.2)
- [CVE-2011-4203](https://insights.sbomify.com/CVE-2011-4203/): Moodle CRLF Injection Vulnerability in Calendar Component (medium 5.0)
- [CVE-2011-4202](https://insights.sbomify.com/CVE-2011-4202/): Privilege escalation in n/a (high 7.2)
- [CVE-2011-4201](https://insights.sbomify.com/CVE-2011-4201/): Command injection in n/a (critical 9.3)
- [CVE-2011-4197](https://insights.sbomify.com/CVE-2011-4197/): Security feature bypass in n/a (high 7.5)
- [CVE-2011-4195](https://insights.sbomify.com/CVE-2011-4195/): Command injection in n/a (high 7.5)
- [CVE-2011-4194](https://insights.sbomify.com/CVE-2011-4194/): Memory corruption in n/a (high 7.5)
- [CVE-2011-4193](https://insights.sbomify.com/CVE-2011-4193/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-4192](https://insights.sbomify.com/CVE-2011-4192/): Command injection in n/a (high 7.5)
- [CVE-2011-4191](https://insights.sbomify.com/CVE-2011-4191/): Memory corruption in n/a (high 7.5)
- [CVE-2011-4190](https://insights.sbomify.com/CVE-2011-4190/): Missing verification of host key for kdump server (medium 5.9)
- [CVE-2011-4189](https://insights.sbomify.com/CVE-2011-4189/): Memory corruption in n/a (high 7.5)
- [CVE-2011-4188](https://insights.sbomify.com/CVE-2011-4188/): Memory corruption in n/a (medium 4.0)
- [CVE-2011-4187](https://insights.sbomify.com/CVE-2011-4187/): Memory corruption in n/a (critical 10.0)
- [CVE-2011-4186](https://insights.sbomify.com/CVE-2011-4186/): Memory corruption in n/a (critical 9.3)
- [CVE-2011-4185](https://insights.sbomify.com/CVE-2011-4185/): Memory corruption in n/a (critical 10.0)
- [CVE-2011-4183](https://insights.sbomify.com/CVE-2011-4183/): open build service allows anyone to upload rpms (medium 6.5)
- [CVE-2011-4182](https://insights.sbomify.com/CVE-2011-4182/): shell code injection via ESSID because of missing escaping of a variable (high 7.3)
- [CVE-2011-4181](https://insights.sbomify.com/CVE-2011-4181/): open build service information leak via unauthorized source access (medium 4.3)
- [CVE-2011-4173](https://insights.sbomify.com/CVE-2011-4173/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2011-4172](https://insights.sbomify.com/CVE-2011-4172/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-4171](https://insights.sbomify.com/CVE-2011-4171/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-4170](https://insights.sbomify.com/CVE-2011-4170/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-4169](https://insights.sbomify.com/CVE-2011-4169/): Other in n/a (high 7.5)
- [CVE-2011-4168](https://insights.sbomify.com/CVE-2011-4168/): Path traversal in n/a (high 7.5)
- [CVE-2011-4167](https://insights.sbomify.com/CVE-2011-4167/): Memory corruption in n/a (high 7.5)
- [CVE-2011-4166](https://insights.sbomify.com/CVE-2011-4166/): Path traversal in n/a (high 7.5)
- [CVE-2011-4165](https://insights.sbomify.com/CVE-2011-4165/): Other in n/a (critical 10.0)
- [CVE-2011-4164](https://insights.sbomify.com/CVE-2011-4164/): Other in n/a (critical 10.0)
- [CVE-2011-4163](https://insights.sbomify.com/CVE-2011-4163/): Other in n/a (critical 10.0)
- [CVE-2011-4162](https://insights.sbomify.com/CVE-2011-4162/): Memory corruption in n/a (high 7.5)
- [CVE-2011-4161](https://insights.sbomify.com/CVE-2011-4161/): Missing authorization in n/a (critical 10.0)
- [CVE-2011-4160](https://insights.sbomify.com/CVE-2011-4160/): Missing authorization in n/a (low 3.2)
- [CVE-2011-4159](https://insights.sbomify.com/CVE-2011-4159/): Privilege escalation in n/a (medium 6.8)
- [CVE-2011-4158](https://insights.sbomify.com/CVE-2011-4158/): Information disclosure in n/a (medium 4.0)
- [CVE-2011-4157](https://insights.sbomify.com/CVE-2011-4157/): Memory corruption in n/a (critical 10.0)
- [CVE-2011-4156](https://insights.sbomify.com/CVE-2011-4156/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-4155](https://insights.sbomify.com/CVE-2011-4155/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-4153](https://insights.sbomify.com/CVE-2011-4153/): Null dereference in n/a (medium 5.0)
- [CVE-2011-4151](https://insights.sbomify.com/CVE-2011-4151/): Denial of service in n/a (high 7.8)
- [CVE-2011-4144](https://insights.sbomify.com/CVE-2011-4144/): Privilege escalation in n/a (medium 6.8)
- [CVE-2011-4143](https://insights.sbomify.com/CVE-2011-4143/): Information disclosure in n/a (medium 5.0)
- [CVE-2011-4142](https://insights.sbomify.com/CVE-2011-4142/): Information disclosure in n/a (low 2.1)
- [CVE-2011-4141](https://insights.sbomify.com/CVE-2011-4141/): Privilege escalation in n/a (critical 9.3)
- [CVE-2011-4140](https://insights.sbomify.com/CVE-2011-4140/): Django Cross-Site Request Forgery vulnerability (medium 6.8)
- [CVE-2011-4139](https://insights.sbomify.com/CVE-2011-4139/): Django Vulnerable to Cache Poisoning (medium 5.0)
- [CVE-2011-4138](https://insights.sbomify.com/CVE-2011-4138/): Django Might Allow CSRF Requests via URL Verification (medium 5.0)
- [CVE-2011-4137](https://insights.sbomify.com/CVE-2011-4137/): Denial of service in django (medium 5.0)
- [CVE-2011-4136](https://insights.sbomify.com/CVE-2011-4136/): Session manipulation in Django (medium 5.8)
- [CVE-2011-4135](https://insights.sbomify.com/CVE-2011-4135/): Path traversal in n/a (critical 10.0)
- [CVE-2011-4134](https://insights.sbomify.com/CVE-2011-4134/): Memory corruption in n/a (critical 10.0)
- [CVE-2011-4133](https://insights.sbomify.com/CVE-2011-4133/): Moodle vulnerable to Cross-Site Request Forgery (medium 6.8)
- [CVE-2011-4132](https://insights.sbomify.com/CVE-2011-4132/): Denial of service in n/a (low 2.1)
- [CVE-2011-4131](https://insights.sbomify.com/CVE-2011-4131/): Denial of service in n/a (medium 4.6)
- [CVE-2011-4130](https://insights.sbomify.com/CVE-2011-4130/): Use after free in n/a (critical 9.0)
- [CVE-2011-4129](https://insights.sbomify.com/CVE-2011-4129/): Information disclosure in n/a (medium 5.8)
- [CVE-2011-4128](https://insights.sbomify.com/CVE-2011-4128/): Memory corruption in n/a (medium 4.3)
- [CVE-2011-4127](https://insights.sbomify.com/CVE-2011-4127/): Security feature bypass in n/a (medium 4.6)
- [CVE-2011-4126](https://insights.sbomify.com/CVE-2011-4126/): Race condition in Calibre (high 8.1)
- [CVE-2011-4125](https://insights.sbomify.com/CVE-2011-4125/): Privilege escalation in Calibre (critical 9.8)
- [CVE-2011-4124](https://insights.sbomify.com/CVE-2011-4124/): Command injection in Calibre (critical 9.8)
- [CVE-2011-4122](https://insights.sbomify.com/CVE-2011-4122/): Path traversal in n/a (medium 6.9)
- [CVE-2011-4121](https://insights.sbomify.com/CVE-2011-4121/): Weak cryptography in OpenSSL extension of Ruby (Git trunk) (critical 9.8)
- [CVE-2011-4120](https://insights.sbomify.com/CVE-2011-4120/): Auth bypass in yubico-pam (critical 9.8)
- [CVE-2011-4119](https://insights.sbomify.com/CVE-2011-4119/): Other in caml-light (critical 9.8)
- [CVE-2011-4118](https://insights.sbomify.com/CVE-2011-4118/): Privilege escalation in n/a (medium 6.0)
- [CVE-2011-4117](https://insights.sbomify.com/CVE-2011-4117/): Path traversal in Batch::BatchRun (high 7.5)
- [CVE-2011-4116](https://insights.sbomify.com/CVE-2011-4116/): Path traversal in File::Temp (low 3.3)
- [CVE-2011-4115](https://insights.sbomify.com/CVE-2011-4115/): Path traversal in Parallel::ForkManager (high 7.5)
- [CVE-2011-4114](https://insights.sbomify.com/CVE-2011-4114/): Path traversal in n/a (low 3.3)
- [CVE-2011-4113](https://insights.sbomify.com/CVE-2011-4113/): SQL injection in n/a (high 7.5)
- [CVE-2011-4112](https://insights.sbomify.com/CVE-2011-4112/): Denial of service in n/a (medium 5.5)
- [CVE-2011-4111](https://insights.sbomify.com/CVE-2011-4111/): Memory corruption in n/a (medium 6.8)
- [CVE-2011-4110](https://insights.sbomify.com/CVE-2011-4110/): Null dereference in n/a (low 2.1)
- [CVE-2011-4109](https://insights.sbomify.com/CVE-2011-4109/): Memory corruption in n/a (critical 9.3)
- [CVE-2011-4108](https://insights.sbomify.com/CVE-2011-4108/): Weak cryptography in n/a (medium 4.3)
- [CVE-2011-4107](https://insights.sbomify.com/CVE-2011-4107/): phpMyAdmin vulnerable to XML external entity (XXE) injection attack (medium 6.5)
- [CVE-2011-4106](https://insights.sbomify.com/CVE-2011-4106/): File upload in n/a (medium 6.8)
- [CVE-2011-4105](https://insights.sbomify.com/CVE-2011-4105/): Path traversal in n/a (low 1.9)
- [CVE-2011-4104](https://insights.sbomify.com/CVE-2011-4104/): Django Tastypie Improper Deserialization of YAML Data (high 7.5)
- [CVE-2011-4103](https://insights.sbomify.com/CVE-2011-4103/): Django-piston and Django-tastypie do not properly deserialize YAML data (high 7.5)
- [CVE-2011-4102](https://insights.sbomify.com/CVE-2011-4102/): Memory corruption in n/a (medium 4.3)
- [CVE-2011-4101](https://insights.sbomify.com/CVE-2011-4101/): Null dereference in n/a (medium 4.3)
- [CVE-2011-4100](https://insights.sbomify.com/CVE-2011-4100/): Denial of service in n/a (medium 4.3)
- [CVE-2011-4099](https://insights.sbomify.com/CVE-2011-4099/): Security feature bypass in n/a (medium 4.6)
- [CVE-2011-4098](https://insights.sbomify.com/CVE-2011-4098/): Denial of service in n/a (low 1.9)
- [CVE-2011-4097](https://insights.sbomify.com/CVE-2011-4097/): Integer overflow in n/a (medium 5.5)
- [CVE-2011-4096](https://insights.sbomify.com/CVE-2011-4096/): Denial of service in n/a (medium 5.0)
- [CVE-2011-4095](https://insights.sbomify.com/CVE-2011-4095/): Jara 1.6 has an XSS vulnerability (medium 6.1)
- [CVE-2011-4094](https://insights.sbomify.com/CVE-2011-4094/): SQL injection in Jara (critical 9.8)
- [CVE-2011-4093](https://insights.sbomify.com/CVE-2011-4093/): Integer overflow in n/a (medium 5.8)
- [CVE-2011-4092](https://insights.sbomify.com/CVE-2011-4092/): Security feature bypass in n/a (medium 5.8)
- [CVE-2011-4091](https://insights.sbomify.com/CVE-2011-4091/): Missing authorization in n/a (medium 5.0)
- [CVE-2011-4090](https://insights.sbomify.com/CVE-2011-4090/): Cross-site scripting in serendipity (medium 6.1)
- [CVE-2011-4089](https://insights.sbomify.com/CVE-2011-4089/): Race condition in n/a (medium 4.6)
- [CVE-2011-4088](https://insights.sbomify.com/CVE-2011-4088/): Information disclosure in ABRT (high 7.5)
- [CVE-2011-4087](https://insights.sbomify.com/CVE-2011-4087/): Null dereference in n/a (high 7.5)
- [CVE-2011-4086](https://insights.sbomify.com/CVE-2011-4086/): Denial of service in n/a (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2011/page/10/