2011

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbit

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacker

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote at

Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execut

Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media p

Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of se

Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attacke

Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or po

Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and

Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or

Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating

Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a deni

Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial o

Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attacke

Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a deni

Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a

Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attacker

Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote atta

Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote att

Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of

Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 G

Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPs

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers t

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain

Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote atta

Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine,

IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obta

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap m

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application c

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Serv

The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-

WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to

Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5,

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GI

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attacker

Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or

Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to

Google Chrome before 12.0.742.91 does not properly implement the framework for extensions, which allows remote attackers

Use-after-free vulnerability in the developer tools in Google Chrome before 12.0.742.91 allows remote attackers to cause

Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a

Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a

Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers t

Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier a

Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execu

Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause