Main entries ~3682 :
Date Id Summary Products Score Patch Annotated
2012-05-24 CVE-2011-3359 The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame. Linux_kernel 7.5
2011-09-21 CVE-2011-3358 Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote attackers to inject arbitrary web script or HTML via the (1) os, (2) os_build, or (3) platform parameter to (a) bug_report_page.php or (b) bug_update_advanced_page.php, related to use of the Projax library. Mantisbt N/A
2011-09-21 CVE-2011-3357 Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter, related to bug_actiongroup_page.php. Mantisbt N/A
2011-09-21 CVE-2011-3356 Multiple cross-site scripting (XSS) vulnerabilities in config_defaults_inc.php in MantisBT before 1.2.8 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO, as demonstrated by the PATH_INFO to (1) manage_config_email_page.php, (2) manage_config_workflow_page.php, or (3) bugs/plugin.php. Mantisbt N/A
2012-05-24 CVE-2011-3353 Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem. Linux_kernel 5.5
2014-04-01 CVE-2011-3346 Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs. Qemu, Enterprise_linux, Xen N/A
2011-09-16 CVE-2011-3211 The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client. Bcfg2 N/A
Remaining NVD entries (unprocessed / no code available): ~286405 :
Date Id Summary Products Score Patch
2025-05-13 CVE-2025-47858 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47859 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47860 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47861 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47862 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47863 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-4396 The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive... N/A 7.5