Main entries ~3682 :
Date Id Summary Products Score Patch Annotated
2011-10-04 CVE-2011-1572 Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands. Gitolite N/A
2012-06-21 CVE-2011-1493 Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket. Linux_kernel N/A
2012-06-21 CVE-2011-1479 Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250. Linux_kernel N/A
2012-06-21 CVE-2011-1477 Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer. Linux_kernel, Linux_enterprise_desktop N/A
2012-06-21 CVE-2011-1476 Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer. Linux_kernel N/A
2013-03-01 CVE-2011-1182 kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call. Linux_kernel, Enterprise_linux, Enterprise_linux_aus, Enterprise_linux_desktop, Enterprise_linux_eus, Enterprise_linux_server, Enterprise_linux_workstation N/A
2013-06-08 CVE-2011-1180 Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length. Linux_kernel 9.8
Remaining NVD entries (unprocessed / no code available): ~286405 :
Date Id Summary Products Score Patch
2025-05-13 CVE-2025-47858 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47859 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47860 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47861 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47862 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47863 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-4396 The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive... N/A 7.5