2011

Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a de

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of ser

Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a den

Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a

Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of ser

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher fo

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows

crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easi

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thr

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which r

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .p

Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .p

AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which

ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct r

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev

ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea

Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php fil

CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev

conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direc

concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a .

Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which r

CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal

DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea

DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which

Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal

Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array para