2011

Use-after-free vulnerability in Skia, as used in Google Chrome before 13.0.782.107, allows remote attackers to cause a d

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 does not properly restrict access to internal schemes, which allows remote attackers t

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote at

Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial o

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handli

The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote

The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not

Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endp

Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command l

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3

Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentica

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows rem

PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute ar

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a d

Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspe

Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, w

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to caus

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial o

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows re

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and att

Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to ha

Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a sess

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote a

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, w

Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to in

Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote a

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other ve

Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long file

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of

Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of a

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to ca

Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execu

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers

Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to h

Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow rem

CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of servic

Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows