Skip to content

No weakness recorded · 2011

No weakness recorded: 2011

771 CVEs · 3 exploited

Every dot is a CVE whose record names no weakness (CWE), published in 2011. The named ones are the most at risk.

exploited in the wild
3
likely to be exploited
71

Every one of the 771 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista…CVE-2011-3402Microsoft · CVSS 8.8 · 78% likely

    Microsoft

  2. Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier;…CVE-2011-0609Adobe · CVSS 7.8 · 64% likely

    AdobeAPT12

  3. afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows loc…CVE-2011-2005Microsoft · CVSS 7.8 · 32% likely

    MicrosoftFIN6

  4. Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Jav…CVE-2010-4452Sun · 83% likely

    Sun Microsystems

  5. HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attacke…CVE-2011-0276Hp · 82% likely

    HP

  6. Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via ve…CVE-2011-3587Plone · 78% likely

    Plone

  7. Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attack…CVE-2010-3600Oracle · 77% likely

    Oracle

  8. Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and…CVE-2011-3556Oracle · 76% likely

    Oracle

  9. Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect con…CVE-2010-4417Oracle · 76% likely

    Oracle

  10. Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210.CVE-2011-3167Hp · 65% likely

    HP

  11. Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidenti…CVE-2011-0807Sun · 61% likely

    Sun Microsystems

  12. Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Opt…CVE-2011-1996Microsoft · 59% likely

    Microsoft

  13. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an attempted access to a virtual fu…CVE-2011-2001Microsoft · 43% likely

    Microsoft

  14. The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management…CVE-2009-3028Symantec · 43% likely

    Symantec

  15. Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server…CVE-2011-1975Microsoft · 42% likely

    Microsoft

  16. Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not…CVE-2011-1345Microsoft · 41% likely

    Microsoft

  17. The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (ap…CVE-2010-4051Gnu · 40% likely

    GNU

  18. Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained…CVE-2010-2632Sun · 35% likely

    Sun Microsystems

  19. Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified di…CVE-2011-3360Wireshark · 35% likely

    Wireshark

  20. The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to execute arbitrary programs via…CVE-2011-1961Microsoft · 34% likely

    Microsoft

  21. Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentialit…CVE-2011-2264Oracle · 31% likely

    Oracle

  22. Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low i…CVE-2011-1347Microsoft · 28% likely

    Microsoft

  23. The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access G…CVE-2010-4566Citrix · 28% likely

    Citrix (NetScaler)

  24. Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gop…CVE-2011-3205Squid-Cache · 27% likely

    Squid-Cache

  25. Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory ad…CVE-2011-1999Microsoft · 27% likely

    Microsoft

  26. Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as…CVE-2011-1346Microsoft · 26% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.