# Vulnerabilities published in 2011


- [CVE-2011-1051](https://insights.sbomify.com/CVE-2011-1051/): Integer overflow in n/a (critical 10.0)
- [CVE-2011-1050](https://insights.sbomify.com/CVE-2011-1050/): Other in n/a (critical 10.0)
- [CVE-2011-1049](https://insights.sbomify.com/CVE-2011-1049/): Memory corruption in n/a (medium 6.8)
- [CVE-2011-1048](https://insights.sbomify.com/CVE-2011-1048/): SQL injection in n/a (high 7.5)
- [CVE-2011-1047](https://insights.sbomify.com/CVE-2011-1047/): SQL injection in n/a (high 7.5)
- [CVE-2011-1046](https://insights.sbomify.com/CVE-2011-1046/): Missing authorization in n/a (medium 5.0)
- [CVE-2011-1045](https://insights.sbomify.com/CVE-2011-1045/): Privilege escalation in n/a (medium 6.8)
- [CVE-2011-1044](https://insights.sbomify.com/CVE-2011-1044/): Information disclosure in n/a (low 2.1)
- [CVE-2011-1042](https://insights.sbomify.com/CVE-2011-1042/): Use after free in n/a (medium 4.3)
- [CVE-2011-1038](https://insights.sbomify.com/CVE-2011-1038/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-1036](https://insights.sbomify.com/CVE-2011-1036/): Code injection in n/a (high 8.8)
- [CVE-2011-1035](https://insights.sbomify.com/CVE-2011-1035/): Auth bypass in n/a (high 7.5)
- [CVE-2011-1034](https://insights.sbomify.com/CVE-2011-1034/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-1033](https://insights.sbomify.com/CVE-2011-1033/): Memory corruption in n/a (critical 9.3)
- [CVE-2011-1032](https://insights.sbomify.com/CVE-2011-1032/): Missing authorization in n/a (medium 6.8)
- [CVE-2011-1031](https://insights.sbomify.com/CVE-2011-1031/): Path traversal in n/a (low 3.3)
- [CVE-2011-1030](https://insights.sbomify.com/CVE-2011-1030/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2011-1029](https://insights.sbomify.com/CVE-2011-1029/): Cross-site scripting in n/a (low 3.5)
- [CVE-2011-1028](https://insights.sbomify.com/CVE-2011-1028/): Smarty3 Arbitrary PHP Code Execution (critical 9.8)
- [CVE-2011-1027](https://insights.sbomify.com/CVE-2011-1027/): Denial of service in n/a (medium 5.0)
- [CVE-2011-1026](https://insights.sbomify.com/CVE-2011-1026/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2011-1025](https://insights.sbomify.com/CVE-2011-1025/): Auth bypass in n/a (medium 6.8)
- [CVE-2011-1024](https://insights.sbomify.com/CVE-2011-1024/): Auth bypass in n/a (medium 4.6)
- [CVE-2011-1023](https://insights.sbomify.com/CVE-2011-1023/): Denial of service in n/a (medium 4.9)
- [CVE-2011-1022](https://insights.sbomify.com/CVE-2011-1022/): Security feature bypass in n/a (low 2.1)
- [CVE-2011-1021](https://insights.sbomify.com/CVE-2011-1021/): Privilege escalation in n/a (low 3.6)
- [CVE-2011-1020](https://insights.sbomify.com/CVE-2011-1020/): Information disclosure in n/a (medium 4.6)
- [CVE-2011-1019](https://insights.sbomify.com/CVE-2011-1019/): Privilege escalation in n/a (low 1.9)
- [CVE-2011-1018](https://insights.sbomify.com/CVE-2011-1018/): Command injection in n/a (critical 10.0)
- [CVE-2011-1017](https://insights.sbomify.com/CVE-2011-1017/): Memory corruption in n/a (high 7.2)
- [CVE-2011-1016](https://insights.sbomify.com/CVE-2011-1016/): Memory corruption in n/a (low 1.9)
- [CVE-2011-1015](https://insights.sbomify.com/CVE-2011-1015/): Information disclosure in n/a (medium 5.0)
- [CVE-2011-1013](https://insights.sbomify.com/CVE-2011-1013/): Integer overflow in n/a (high 7.2)
- [CVE-2011-1012](https://insights.sbomify.com/CVE-2011-1012/): Denial of service in n/a (medium 4.9)
- [CVE-2011-1011](https://insights.sbomify.com/CVE-2011-1011/): Privilege escalation in n/a (medium 6.9)
- [CVE-2011-1010](https://insights.sbomify.com/CVE-2011-1010/): Memory corruption in n/a (medium 4.9)
- [CVE-2011-1009](https://insights.sbomify.com/CVE-2011-1009/): Cross-site scripting in Vanilla Forums (medium 6.1)
- [CVE-2011-1008](https://insights.sbomify.com/CVE-2011-1008/): Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUse (medium 4.0)
- [CVE-2011-1007](https://insights.sbomify.com/CVE-2011-1007/): Information disclosure in n/a (low 2.1)
- [CVE-2011-1006](https://insights.sbomify.com/CVE-2011-1006/): Memory corruption in n/a (high 7.2)
- [CVE-2011-1005](https://insights.sbomify.com/CVE-2011-1005/): Security feature bypass in n/a (medium 5.0)
- [CVE-2011-10043](https://insights.sbomify.com/CVE-2011-10043/): Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded (critical 9.8)
- [CVE-2011-10041](https://insights.sbomify.com/CVE-2011-10041/): Uploadify <= 1.0 Unauthenticated Arbitrary File Upload (critical 9.3)
- [CVE-2011-10040](https://insights.sbomify.com/CVE-2011-10040/): Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions (medium 5.1)
- [CVE-2011-1004](https://insights.sbomify.com/CVE-2011-1004/): Path traversal in n/a (medium 6.3)
- [CVE-2011-10039](https://insights.sbomify.com/CVE-2011-10039/): Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing (medium 5.1)
- [CVE-2011-10038](https://insights.sbomify.com/CVE-2011-10038/): Nagios XI < 2011R1.9 XSS via Recurring Downtime Script (medium 5.1)
- [CVE-2011-10037](https://insights.sbomify.com/CVE-2011-10037/): Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks (medium 5.1)
- [CVE-2011-10036](https://insights.sbomify.com/CVE-2011-10036/): Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler (medium 5.1)
- [CVE-2011-10035](https://insights.sbomify.com/CVE-2011-10035/): Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE (high 7.3)
- [CVE-2011-10034](https://insights.sbomify.com/CVE-2011-10034/): IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS (medium 6.9)
- [CVE-2011-10033](https://insights.sbomify.com/CVE-2011-10033/): WordPress Plugin is-human <= v1.4.2 Eval Injection RCE (critical 9.3)
- [CVE-2011-10032](https://insights.sbomify.com/CVE-2011-10032/): Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57 (critical 9.3)
- [CVE-2011-10030](https://insights.sbomify.com/CVE-2011-10030/): Foxit PDF Reader < 4.3.1.0218 JavaScript File Write (high 8.4)
- [CVE-2011-1003](https://insights.sbomify.com/CVE-2011-1003/): Memory corruption in n/a (medium 6.8)
- [CVE-2011-10029](https://insights.sbomify.com/CVE-2011-10029/): Solar FTP Server <= 2.1.1 Malformed USER Denial of Service (high 8.7)
- [CVE-2011-10028](https://insights.sbomify.com/CVE-2011-10028/): RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution (high 8.7)
- [CVE-2011-10027](https://insights.sbomify.com/CVE-2011-10027/): AOL Desktop 9.6 RTX Stack-Based Buffer Overflow (high 8.4)
- [CVE-2011-10026](https://insights.sbomify.com/CVE-2011-10026/): Spreecommerce < 0.50.x API RCE (critical 9.3)
- [CVE-2011-10025](https://insights.sbomify.com/CVE-2011-10025/): Subtitle Processor 7.7.1 .m3u SEH Unicode Buffer Overflow (high 8.5)
- [CVE-2011-10024](https://insights.sbomify.com/CVE-2011-10024/): MJM Core Player 2011 .s3m File Stack-Based Buffer Overflow (high 8.4)
- [CVE-2011-10023](https://insights.sbomify.com/CVE-2011-10023/): MJM QuickPlayer <= 2010 .s3m Stack-Based Buffer Overflow (high 8.4)
- [CVE-2011-10022](https://insights.sbomify.com/CVE-2011-10022/): SPlayer 3.7 Content-Type Header Buffer Overflow (high 8.6)
- [CVE-2011-10021](https://insights.sbomify.com/CVE-2011-10021/): Magix Musik Maker <= v16 .mmm Stack-Based Buffer Overflow (high 8.4)
- [CVE-2011-10020](https://insights.sbomify.com/CVE-2011-10020/): Kaillera 0.86 Server DoS via Malformed UDP Packet (high 8.7)
- [CVE-2011-1002](https://insights.sbomify.com/CVE-2011-1002/): avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty (medium 5.0)
- [CVE-2011-10019](https://insights.sbomify.com/CVE-2011-10019/): Spreecommerce < 0.60.2 Search Parameter RCE (critical 10.0)
- [CVE-2011-10018](https://insights.sbomify.com/CVE-2011-10018/): myBB 1.6.4 Backdoor Arbitrary Command Execution (critical 10.0)
- [CVE-2011-10017](https://insights.sbomify.com/CVE-2011-10017/): Snort Report nmap.php/nbtscan.php RCE (critical 10.0)
- [CVE-2011-10016](https://insights.sbomify.com/CVE-2011-10016/): Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow (critical 9.3)
- [CVE-2011-10015](https://insights.sbomify.com/CVE-2011-10015/): Cytel Studio <= 9.0 .CY3 File Stack Buffer Overflow (critical 9.3)
- [CVE-2011-10014](https://insights.sbomify.com/CVE-2011-10014/): GTA SA-MP server.cfg Buffer Overflow (high 8.7)
- [CVE-2011-10013](https://insights.sbomify.com/CVE-2011-10013/): Traq 2.0–2.3 admincp/common.php RCE (critical 10.0)
- [CVE-2011-10012](https://insights.sbomify.com/CVE-2011-10012/): NetOp Remote Control Client 9.5 .dws File Buffer Overflow (high 8.4)
- [CVE-2011-10011](https://insights.sbomify.com/CVE-2011-10011/): WeBid 1.0.2 converter.php Remote PHP Code Injection (critical 10.0)
- [CVE-2011-10010](https://insights.sbomify.com/CVE-2011-10010/): QuickShare File Server 1.2.1 Path Traversal RCE (critical 9.4)
- [CVE-2011-1001](https://insights.sbomify.com/CVE-2011-1001/): Denial of service in n/a (medium 4.3)
- [CVE-2011-10009](https://insights.sbomify.com/CVE-2011-10009/): S40 CMS 0.4.2 Path Traversal (high 8.7)
- [CVE-2011-10008](https://insights.sbomify.com/CVE-2011-10008/): MPlayer Lite r33064 M3U Stack-Based Buffer Overflow (high 8.6)
- [CVE-2011-10007](https://insights.sbomify.com/CVE-2011-10007/): Command injection in File::Find::Rule (high 8.8)
- [CVE-2011-10006](https://insights.sbomify.com/CVE-2011-10006/): GamerZ WP-PostRatings wp-postratings.php cross site scripting (low 3.5)
- [CVE-2011-10005](https://insights.sbomify.com/CVE-2011-10005/): EasyFTP MKD Command buffer overflow (medium 6.3)
- [CVE-2011-10004](https://insights.sbomify.com/CVE-2011-10004/): reciply Plugin uploadImage.php unrestricted upload (medium 6.3)
- [CVE-2011-10003](https://insights.sbomify.com/CVE-2011-10003/): XpressEngine Update Query sql injection (medium 5.5)
- [CVE-2011-10002](https://insights.sbomify.com/CVE-2011-10002/): weblabyrinth labyrinth.inc.php Labyrinth sql injection (medium 5.5)
- [CVE-2011-10001](https://insights.sbomify.com/CVE-2011-10001/): iamdroppy phoenixcf articles.cfm sql injection (medium 5.5)
- [CVE-2011-1000](https://insights.sbomify.com/CVE-2011-1000/): Information disclosure in n/a (medium 6.4)
- [CVE-2011-0999](https://insights.sbomify.com/CVE-2011-0999/): Denial of service in n/a (medium 4.9)
- [CVE-2011-0997](https://insights.sbomify.com/CVE-2011-0997/): Command injection in n/a (high 7.5)
- [CVE-2011-0996](https://insights.sbomify.com/CVE-2011-0996/): Command injection in n/a (medium 6.8)
- [CVE-2011-0995](https://insights.sbomify.com/CVE-2011-0995/): sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges (low 2.1)
- [CVE-2011-0994](https://insights.sbomify.com/CVE-2011-0994/): Memory corruption in n/a (critical 10.0)
- [CVE-2011-0993](https://insights.sbomify.com/CVE-2011-0993/): Information disclosure in n/a (low 2.1)
- [CVE-2011-0992](https://insights.sbomify.com/CVE-2011-0992/): Use after free in n/a (medium 5.8)
- [CVE-2011-0991](https://insights.sbomify.com/CVE-2011-0991/): Use after free in n/a (medium 6.8)
- [CVE-2011-0990](https://insights.sbomify.com/CVE-2011-0990/): Race condition in n/a (medium 5.8)
- [CVE-2011-0989](https://insights.sbomify.com/CVE-2011-0989/): Memory corruption in n/a (medium 5.8)
- [CVE-2011-0988](https://insights.sbomify.com/CVE-2011-0988/): Privilege escalation in n/a (medium 4.4)
- [CVE-2011-0987](https://insights.sbomify.com/CVE-2011-0987/): SQL injection in n/a (medium 6.5)
- [CVE-2011-0986](https://insights.sbomify.com/CVE-2011-0986/): phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2011/page/38/