2011

Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attac

The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspeci

Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which make

actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem

Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress al

SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands

SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary S

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might

SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to ex

SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL command

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly ha

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary met

Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface,

Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allo

Google Chrome before 9.0.597.107 does not properly implement key frame rules, which allows remote attackers to cause a d

Google Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote attackers to cause a de

Google Chrome before 9.0.597.107 does not properly perform SVG rendering, which allows remote attackers to cause a denia

Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of ser

Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of ser

Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denia

Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a deni

Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly ha

Google Chrome before 9.0.597.107 does not properly restrict access to internal extension functions, which has unspecifie

Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or

Google Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers to cause a denial of se

Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.1

Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow remote attackers to execu

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests,

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execu

Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sand

Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denia

Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service o

Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via un

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service o

The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of servi

Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a den

The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or pos

Google Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote attackers to cause a de

The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a d

Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial

The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which

Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibl

webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary command

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service

Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.p

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of servic

Unspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote attackers to access res