# Vulnerabilities published in 2011 - [CVE-2011-5026](https://insights.sbomify.com/CVE-2011-5026/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-5025](https://insights.sbomify.com/CVE-2011-5025/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-5024](https://insights.sbomify.com/CVE-2011-5024/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-5023](https://insights.sbomify.com/CVE-2011-5023/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-5022](https://insights.sbomify.com/CVE-2011-5022/): SQL injection in n/a (high 7.5) - [CVE-2011-5021](https://insights.sbomify.com/CVE-2011-5021/): Code injection in n/a (high 7.5) - [CVE-2011-5020](https://insights.sbomify.com/CVE-2011-5020/): SQL injection in n/a (critical 9.8) - [CVE-2011-5019](https://insights.sbomify.com/CVE-2011-5019/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-5018](https://insights.sbomify.com/CVE-2011-5018/): Cross-site scripting in n/a (medium 6.1) - [CVE-2011-5012](https://insights.sbomify.com/CVE-2011-5012/): Memory corruption in n/a (critical 10.0) - [CVE-2011-5011](https://insights.sbomify.com/CVE-2011-5011/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2011-5010](https://insights.sbomify.com/CVE-2011-5010/): Command injection in n/a (critical 10.0) - [CVE-2011-5009](https://insights.sbomify.com/CVE-2011-5009/): Null dereference in n/a (medium 5.0) - [CVE-2011-5008](https://insights.sbomify.com/CVE-2011-5008/): Integer overflow in n/a (high 7.5) - [CVE-2011-5007](https://insights.sbomify.com/CVE-2011-5007/): Memory corruption in n/a (critical 10.0) - [CVE-2011-5006](https://insights.sbomify.com/CVE-2011-5006/): Memory corruption in n/a (critical 9.3) - [CVE-2011-5005](https://insights.sbomify.com/CVE-2011-5005/): File upload in n/a (high 7.5) - [CVE-2011-5004](https://insights.sbomify.com/CVE-2011-5004/): File upload in n/a (medium 6.0) - [CVE-2011-5003](https://insights.sbomify.com/CVE-2011-5003/): Memory corruption in n/a (critical 10.0) - [CVE-2011-5002](https://insights.sbomify.com/CVE-2011-5002/): Memory corruption in n/a (critical 10.0) - [CVE-2011-5001](https://insights.sbomify.com/CVE-2011-5001/): Memory corruption in n/a (critical 10.0) - [CVE-2011-5000](https://insights.sbomify.com/CVE-2011-5000/): Denial of service in n/a (low 3.5) - [CVE-2011-4973](https://insights.sbomify.com/CVE-2011-4973/): Auth bypass in n/a (critical 9.8) - [CVE-2011-4972](https://insights.sbomify.com/CVE-2011-4972/): Missing authorization in CKEditor Drupal module (high 7.5) - [CVE-2011-4971](https://insights.sbomify.com/CVE-2011-4971/): Integer overflow in n/a (medium 5.0) - [CVE-2011-4970](https://insights.sbomify.com/CVE-2011-4970/): SQL injection in n/a (high 7.5) - [CVE-2011-4969](https://insights.sbomify.com/CVE-2011-4969/): jQuery vulnerable to Cross-Site Scripting (XSS) (medium 4.3) - [CVE-2011-4968](https://insights.sbomify.com/CVE-2011-4968/): Security feature bypass in nginx (medium 4.8) - [CVE-2011-4967](https://insights.sbomify.com/CVE-2011-4967/): Denial of service in tog-pegasus (high 7.5) - [CVE-2011-4966](https://insights.sbomify.com/CVE-2011-4966/): Auth bypass in n/a (medium 6.0) - [CVE-2011-4963](https://insights.sbomify.com/CVE-2011-4963/): Path traversal in n/a (medium 5.0) - [CVE-2011-4962](https://insights.sbomify.com/CVE-2011-4962/): Silverstripe CMS Arbitrary Code Execution (medium 6.8) - [CVE-2011-4961](https://insights.sbomify.com/CVE-2011-4961/): Privilege escalation in n/a (medium 6.0) - [CVE-2011-4960](https://insights.sbomify.com/CVE-2011-4960/): SQL injection in n/a (high 7.5) - [CVE-2011-4959](https://insights.sbomify.com/CVE-2011-4959/): SQL injection in n/a (medium 6.8) - [CVE-2011-4958](https://insights.sbomify.com/CVE-2011-4958/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4957](https://insights.sbomify.com/CVE-2011-4957/): Denial of service in n/a (medium 5.0) - [CVE-2011-4956](https://insights.sbomify.com/CVE-2011-4956/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4955](https://insights.sbomify.com/CVE-2011-4955/): Cross-site scripting in n/a (medium 6.1) - [CVE-2011-4954](https://insights.sbomify.com/CVE-2011-4954/): Privilege escalation in cobbler (high 7.8) - [CVE-2011-4953](https://insights.sbomify.com/CVE-2011-4953/): Cobbler vulnerable to code injection via unsafe YAML loading (medium 6.8) - [CVE-2011-4952](https://insights.sbomify.com/CVE-2011-4952/): Cobbler Web Interface Lacks CSRF Protection (high 8.8) - [CVE-2011-4951](https://insights.sbomify.com/CVE-2011-4951/): Open redirect in n/a (medium 5.8) - [CVE-2011-4950](https://insights.sbomify.com/CVE-2011-4950/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4949](https://insights.sbomify.com/CVE-2011-4949/): SQL injection in n/a (high 7.5) - [CVE-2011-4948](https://insights.sbomify.com/CVE-2011-4948/): Path traversal in n/a (medium 5.0) - [CVE-2011-4947](https://insights.sbomify.com/CVE-2011-4947/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2011-4946](https://insights.sbomify.com/CVE-2011-4946/): SQL injection in n/a (medium 6.8) - [CVE-2011-4945](https://insights.sbomify.com/CVE-2011-4945/): Privilege escalation in n/a (medium 6.9) - [CVE-2011-4944](https://insights.sbomify.com/CVE-2011-4944/): Race condition in n/a (low 1.9) - [CVE-2011-4943](https://insights.sbomify.com/CVE-2011-4943/): ImpressPages CMS RCE (critical 9.8) - [CVE-2011-4942](https://insights.sbomify.com/CVE-2011-4942/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4941](https://insights.sbomify.com/CVE-2011-4941/): Piwik (now Matomo) Vulnerable to Arbitrary Code Execution (medium 6.8) - [CVE-2011-4940](https://insights.sbomify.com/CVE-2011-4940/): Cross-site scripting in n/a (low 2.6) - [CVE-2011-4939](https://insights.sbomify.com/CVE-2011-4939/): Null dereference in n/a (medium 6.4) - [CVE-2011-4938](https://insights.sbomify.com/CVE-2011-4938/): Cross-site scripting in Ariadne (medium 6.1) - [CVE-2011-4937](https://insights.sbomify.com/CVE-2011-4937/): Information disclosure in Joomla! (high 7.5) - [CVE-2011-4932](https://insights.sbomify.com/CVE-2011-4932/): ImpressPages CMS eval injection vulnerability (high 7.5) - [CVE-2011-4931](https://insights.sbomify.com/CVE-2011-4931/): Weak cryptography in gpw (high 7.5) - [CVE-2011-4930](https://insights.sbomify.com/CVE-2011-4930/): Other in n/a (medium 4.4) - [CVE-2011-4929](https://insights.sbomify.com/CVE-2011-4929/): Command injection in n/a (high 7.5) - [CVE-2011-4928](https://insights.sbomify.com/CVE-2011-4928/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4927](https://insights.sbomify.com/CVE-2011-4927/): Information disclosure in n/a (medium 4.0) - [CVE-2011-4926](https://insights.sbomify.com/CVE-2011-4926/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4925](https://insights.sbomify.com/CVE-2011-4925/): Auth bypass in n/a (medium 4.9) - [CVE-2011-4924](https://insights.sbomify.com/CVE-2011-4924/): Zope XSS Vulnerability (medium 6.1) - [CVE-2011-4923](https://insights.sbomify.com/CVE-2011-4923/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4922](https://insights.sbomify.com/CVE-2011-4922/): Information disclosure in n/a (low 2.1) - [CVE-2011-4921](https://insights.sbomify.com/CVE-2011-4921/): SQL injection in n/a (medium 5.1) - [CVE-2011-4920](https://insights.sbomify.com/CVE-2011-4920/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4919](https://insights.sbomify.com/CVE-2011-4919/): Information disclosure in mpack (high 7.5) - [CVE-2011-4918](https://insights.sbomify.com/CVE-2011-4918/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4917](https://insights.sbomify.com/CVE-2011-4917/): Information disclosure in Linux kernel (medium 5.5) - [CVE-2011-4916](https://insights.sbomify.com/CVE-2011-4916/): Information disclosure in Linux Kernel (medium 5.5) - [CVE-2011-4915](https://insights.sbomify.com/CVE-2011-4915/): Information disclosure in Linux kernel (medium 5.5) - [CVE-2011-4914](https://insights.sbomify.com/CVE-2011-4914/): Information disclosure in n/a (medium 6.4) - [CVE-2011-4913](https://insights.sbomify.com/CVE-2011-4913/): Memory corruption in n/a (high 7.8) - [CVE-2011-4912](https://insights.sbomify.com/CVE-2011-4912/): Security feature bypass in Joomla! (medium 5.3) - [CVE-2011-4911](https://insights.sbomify.com/CVE-2011-4911/): Information disclosure in n/a (medium 5.0) - [CVE-2011-4910](https://insights.sbomify.com/CVE-2011-4910/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4909](https://insights.sbomify.com/CVE-2011-4909/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4908](https://insights.sbomify.com/CVE-2011-4908/): File upload in TinyBrowser Plugin (critical 9.8) - [CVE-2011-4907](https://insights.sbomify.com/CVE-2011-4907/): File upload in Joomla! (medium 5.3) - [CVE-2011-4906](https://insights.sbomify.com/CVE-2011-4906/): File upload in Tiny browser included with TinyMCE 3.0 (critical 9.8) - [CVE-2011-4905](https://insights.sbomify.com/CVE-2011-4905/): Denial of Service in Apache ActiveMQ (medium 5.0) - [CVE-2011-4904](https://insights.sbomify.com/CVE-2011-4904/): Typo3 Improper Access Control (medium 6.5) - [CVE-2011-4903](https://insights.sbomify.com/CVE-2011-4903/): Typo3 XSS in RemoveXSS function (medium 6.1) - [CVE-2011-4902](https://insights.sbomify.com/CVE-2011-4902/): Typo3 Arbitrary File Delete (medium 6.5) - [CVE-2011-4901](https://insights.sbomify.com/CVE-2011-4901/): Typo3 Arbitrary Information Disclosure (medium 6.5) - [CVE-2011-4900](https://insights.sbomify.com/CVE-2011-4900/): Typo3 Information Disclosure (medium 6.5) - [CVE-2011-4899](https://insights.sbomify.com/CVE-2011-4899/): Code injection in n/a (high 7.5) - [CVE-2011-4898](https://insights.sbomify.com/CVE-2011-4898/): Information disclosure in n/a (medium 5.0) - [CVE-2011-4897](https://insights.sbomify.com/CVE-2011-4897/): Information disclosure in n/a (medium 4.3) - [CVE-2011-4896](https://insights.sbomify.com/CVE-2011-4896/): Information disclosure in n/a (medium 4.3) - [CVE-2011-4895](https://insights.sbomify.com/CVE-2011-4895/): Information disclosure in n/a (medium 4.3) - [CVE-2011-4894](https://insights.sbomify.com/CVE-2011-4894/): Information disclosure in n/a (medium 4.3) - [CVE-2011-4890](https://insights.sbomify.com/CVE-2011-4890/): Denial of service in n/a (medium 4.0) - [CVE-2011-4889](https://insights.sbomify.com/CVE-2011-4889/): Auth bypass in n/a (critical 9.8) - [CVE-2011-4887](https://insights.sbomify.com/CVE-2011-4887/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4885](https://insights.sbomify.com/CVE-2011-4885/): Denial of service in n/a (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2011/page/4/