20519 matches found
CVE-2011-1145
The CVE-2011-1145 entry affects unixODBC: the SQLDriverConnect() function before version 2.2.14p2 may overflow a buffer when a large SAVEFILE value is used in the connection string. Multiple connected sources corroborate the same issue across OS vendors (Red Hat, SUSE, Debian, OSV listings). Publ...
CVE-2011-1136
CVE-2011-1136 affects tesseract versions 2.03 and 2.04. The issue enables a local attacker to rewrite an arbitrary user file by guessing a process ID and creating a link to the user’s file, indicating a local-privilege-like impact with integrity risk. The connected documents corroborate the descr...
CVE-2011-1070
CVE-2011-1070 involves v86d (before 0.1.10) failing to verify that netlink messages originate from the kernel. This can allow a local, unprivileged attacker to manipulate the video mode and potentially other consequences. Remediation per connected entries is to upgrade to v86d 0.1.10 or newer (pa...
CVE-2011-0544
CVE-2011-0544 affects phpBB 3.0.x–3.0.6 with an XSS vulnerability via the [flash] BB tag . The available documents consistently identify this issue in phpBB 3.0.x–3.0.6, but provide no explicit root-cause details, affected components beyond the flash tag, exploit status, or remediation (patch/ver...
CVE-2011-4972
CVE-2011-4972 affects CKEditor 7.x-1.4 for Drupal. The hook_file_download routine fails to properly restrict access to private files, enabling an attacker to read private files via a direct request. Affected product: CKEditor module (Drupal contrib) version 7.x-1.4. Root cause: improper access co...
CVE-2011-4972
hookfiledownload in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request...
CVE-2011-3586
CVE-2011-3586 is rejected and not active; reference CVE-2011-3504 instead.
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2011-1802
The CVE-2011-1802 entry concerns WebKit in Google Chrome prior to Blink M11/M12, where improper handling of counter nodes can cause memory corruption leading to a denial of service. The provided documents (NVD entry and duplicates in CNVD/UBU/CVE lists) consistently describe the issue as a memory...
CVE-2011-1802
WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service memory corruption...
CVE-2011-1803
CVE-2011-1803 is a vulnerability in WebKit’s SVGSMILElement handling (third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h) that can occur in Google Chrome before Blink M11/M12 when trying to access a removed SMIL element. The issue is reported across multiple corroborating sources an...
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2011-2334
A use-after-free vulnerability exists in WebKit within Google Chrome before Blink M12, triggered in RenderLayer when removing elements with reflections. Affected component is Chrome/WebKit/Blink RenderLayer; root cause is use-after-free. Public exploitation status and concrete remediation details...
CVE-2011-2335
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function...
CVE-2011-2335
CVE-2011-2335 describes a double-free vulnerability in WebKit within Google Chrome prior to Blink M12, specifically in the WebCore::CSSSelector function. Affected: WebKit/Blink rendering stack in Chrome. Impact: memory/resource mismanagement with partial availability impact (per CVSS). Remediatio...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
CVE-2011-3618 relates to a symlink attack caused by insecure tempfile handling in the tool described as “atop.” The linked records (NVD, OSV, Debian/Ubuntu trackers and others) consistently cite this issue as a local‑attack vulnerability with insecure tempfile handling, leading to potential expos...