CVE-2011-2936

Elgg through 1.7.10 has a SQL injection vulnerability...

CVE-2011-3370

StatusNet (PHP-based micro‑blogging software) before version 0.9.9 is affected by a cross‑site scripting (XSS) vulnerability. Root cause: improper validation of client‑side data by the web application. Impact: potential execution of client‑side code. Remediation/patch details are not provided in ...

CVE-2011-2936

CVE-2011-2936 covers an SQL injection in Elgg up to version 1.7.10 (and earlier). The issue is described across multiple sources as stemming from a lack of validation of externally supplied SQL statements in database-based features, enabling arbitrary SQL commands. Impact details: vulnerability m...

CVE-2011-2936

Elgg through 1.7.10 has a SQL injection vulnerability...

CVE-2011-2935

The CVE-2011-2935 entry documents a Cross-Site Scripting (XSS) vulnerability in Elgg up to version 1.7.10. Multiple connected sources (Red Hat RH CVE, GitHub advisory GHSA-mcfm-j5g6-w26f, OSV, NVD/NVD and CVE listings) corroborate an XSS flaw in this software, with varying descriptions that point...

CVE-2011-2897

CVE-2011-2897 affects gdk-pixbuf through 2.31.1, where the GIF loader overflows a buffer during initialization of decompression tables due to an input validation flaw. The issue is documented with high/critical risk in the provided metrics (CVSS2/3.1). Red Hat, SUSE, and other entries reference t...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-5271

Technical details are not publicly disclosed in the provided documents; no information on affected products, versions, root cause, or fix is included. Monitor for updates.

CVE-2011-2337

A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms...

CVE-2011-2336

The CVE-2011-2336 entry concerns WebKit in Google Chrome prior to Blink M12, involving a flaw in AnimationControllerPrivate when clearing lists that signal the start of a hardware animation. The affected surface is WebKit’s animation controller logic embedded in Chrome, with no explicit affected ...

CVE-2011-2807

Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13...

CVE-2011-2353

Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function...

CVE-2011-2337

The CVE-2011-2337 entry concerns WebKit in Google Chrome (pre-Blink M12) on 64-bit platforms, where a return value from strlen uses the wrong type. The Connected documents reiterate this same issue across multiple sources, without providing concrete exploit details, impacted versions beyond the C...

CVE-2011-2353

The CVE-2011-2353 entry describes a use-after-free vulnerability in the WebKit-based documentloader of Google Chrome, specifically occurring before Blink M13 in DocumentWriter::replaceDocument. Connected documents reiterate this vulnerability without detailing exploit vectors, affected versions b...

CVE-2011-2807

Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13...

CVE-2011-2807

CVE-2011-2807 concerns WebKit in Google Chrome prior to Blink M13, caused by an incorrect handling of timer information in Timer.cpp. The vulnerability affects the timer logic within WebKit used by Chrome, with the NVD entry noting an impact on availability (PARTIAL) and no confidentiality/integr...

CVE-2011-2808

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed...

CVE-2011-2808

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed...

CVE-2011-2808

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed...

CVE-2011-2808

CVE-2011-2808 affects WebKit in Google Chrome prior to Blink M13, where a stale layout root is assigned to an input element when a child of a keygen with autofocus is accessed. This is the underlying cause described in the NVD entry. The associated impact is indicated by a partial availability im...