Skip to content

September 2011 · Band 4

Possible (1 to 10%)

310 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 310 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…CVE-2011-3498Progea · 9.8% likely

    CWE-119Progea

  2. Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot)…CVE-2011-3357Mantisbt · 9.3% likely

    CWE-22Mantisbt

  3. RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long strin…CVE-2011-3489Rockwellautomation · 8.7% likely

    CWE-119Rockwell Automation

  4. Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.…CVE-2011-2426Adobe · 8.2% likely

    CWE-119Adobe

  5. Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possi…CVE-2011-3493Cogentdatahub · 8.0% likely

    CWE-119Cogentdatahub

  6. Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary c…CVE-2011-2441Adobe · 8.0% likely

    CWE-119Adobe

  7. Unspecified vulnerability in HP Business Service Automation (BSA) Essentials 2.01 allows remote attackers to execute arbitrary code via unknown vectors.CVE-2011-2412Hp · 7.5% likely

    HP

  8. WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WI…CVE-2011-1984Microsoft · 7.5% likely

    CWE-264Microsoft

  9. Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET re…CVE-2011-3487Carel · 7.4% likely

    CWE-22Carel

  10. The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allo…CVE-2011-2766Fast Cgi Project · 7.2% likely

    CWE-287

  11. Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote a…CVE-2011-3321Siemens · 7.1% likely

    CWE-119Siemens

  12. cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by t…CVE-2011-3713Powerdrummer · 6.9% likely

    CWE-200

  13. The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote…CVE-2011-2201Mark Stosberg · 6.9% likely

    CWE-264

  14. Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.…CVE-2011-2427Adobe · 6.4% likely

    CWE-119Adobe

  15. Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted str…CVE-2011-2430Adobe · 6.3% likely

    CWE-20Adobe

  16. Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execut…CVE-2011-2438Adobe · 5.9% likely

    CWE-119Adobe

  17. Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vector…CVE-2011-2437Adobe · 5.9% likely

    CWE-119Adobe

  18. Heap-based buffer overflow in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrar…CVE-2011-2436Adobe · 5.9% likely

    CWE-119Adobe

  19. Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.CVE-2011-2435Adobe · 5.9% likely

    CWE-119Adobe

  20. Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vector…CVE-2011-2434Adobe · 5.9% likely

    CWE-119Adobe

  21. Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vector…CVE-2011-2433Adobe · 5.9% likely

    CWE-119Adobe

  22. Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unsp…CVE-2011-2432Adobe · 5.9% likely

    CWE-119Adobe

  23. Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute a…CVE-2011-0342Indusoft · 5.9% likely

    CWE-119Indusoft

  24. The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file.CVE-2011-3504Ffmpeg · 5.9% likely

    CWE-94Ffmpeg

  25. The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (enc…CVE-2011-3502Cogentdatahub · 5.7% likely

    CWE-200Cogentdatahub

  26. Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to…CVE-2011-3483Wireshark · 5.6% likely

    CWE-119Wireshark

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.