20526 matches found
CVE-2011-3105
Removed by vendor...
CVE-2011-3106
CVE-2011-3106 affects Chromium/Google Chrome prior to 19.0.1084.52 where the WebSockets SSL handling allows remote attackers to cause memory corruption or arbitrary code execution. The core issue is improper handling of SSL in the WebSockets implementation, enabling an attacker to exploit the vul...
CVE-2011-3110
CVE-2011-3110 affects Google Chrome prior to 19.0.1084.52, where the PDF functionality is vulnerable to out-of-bounds write operations. This can lead to denial of service or other unspecified impact. Affected component: Chrome PDF handling. Root cause: out-of-bounds write in PDF functions. Mitiga...
CVE-2011-3105
CVE-2011-3105: Use-after-free in Google Chrome’s CSS :first-letter handling (pre‑19.0.1084.52) can allow remote attackers to cause a denial of service and possibly other impact. Documented in multiple scanners (e.g., Nessus/OpenVAS) with exact vulnerable version range and remediation guidance to ...
CVE-2011-3113
CVE-2011-3113 affects Google Chrome’s PDF handling. The issue is an invalid cast during colorspace processing, triggered by a crafted PDF, which can cause a denial of service and possibly other impact. Affected software is Chrome prior to 19.0.1084.52. Connected sources corroborate the CVE entry ...
CVE-2011-3109
Affected software: Chromium on Linux (GTK UI). Vulnerability: CVE-2011-3109 is a bad cast in the GTK UI implementation, enabling denial of service; details point to an unspecified variable cast issue in Chrome prior to 19.0.1084.52. Impact: Denial of service (partial confidentiality/integrity not...
CVE-2011-3115
CVE-2011-3115 concerns Google Chrome/Chromium’s V8 engine with a type corruption flaw. Affected: Chromium/V8 components (Chromium browser and V8 JavaScript engine). Root cause: type corruption in V8 leading to potential remote denial of service and other impact. Exploitation details are not provi...
CVE-2011-3104
CVE-2011-3104 : In Chrome/Chromium, Skia contains an out-of-bounds read leading to a potential denial of service. Affected: Skia as used in Google Chrome before version 19.0.1084.52. Vector is not explicitly specified in the provided documents. Impact: denial of service via out-of-bounds read. Mi...
CVE-2011-3114
Summary: CVE-2011-3114 is a Google Chrome vulnerability affecting the PDF functionality, where multiple buffer overflows in PDF handling can be triggered remotely. The baseline description identifies that these buffer overflows could cause a denial of service or potentially have other unspecified...
CVE-2011-3103
CVE-2011-3103 affects Chromium/V8: Google Chrome before 19.0.1084.52. The issue is in garbage collection in V8, allowing a remote attacker to crash the browser (potentially other impact). Gentoo GLSA 201205-04 and OpenVAS entries corroborate multiple vulnerabilities in Chromium/V8 with high risk;...
[SECURITY] [DSA 2480-1] request-tracker3.8 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2480-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2012 http://www.debian.org/security/faq -...
CVE-2011-5090
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
CVE-2011-5090
GR Board (grboard) version 1.8.6.5 Community Edition exposes an unauthenticated ability to modify or delete data via specific endpoints: mod_rewrite.php, comment_write_ok.php, poll/index.php, update/index.php, trackback.php, or an arbitrary poll.php under theme/. The issue stems from missing auth...
CVE-2011-5090
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
CVE-2011-5091
GR Board (aka grboard) 1.8.6.5 Community Edition is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via: view.php parameters tableType or blindTarget, view_memo.php parameter delTargets[0], or write_ok.php parameter isReported. The root caus...
Apple Safari Multiple Vulnerabilities - Oct 2011 (Windows)
The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafarimultvulnwinoct11.nasl 5940 2017-04-12 09:02:05Z teissa $ Apple Safari Multiple Vulnerabilities - Oct 2011 Windows Authors: Madhuri D Copyright: Copyright ...
CVE-2011-2906
The issue is an integer signedness error in the Linux kernel's pmcraid_ioctl_passthrough under drivers/scsi/pmcraid.c, affecting pre-3.1 kernels. It may allow local attackers to cause denial of service via a negative size value in an ioctl call, typically in environments with a privileged program...
[SECURITY] [DSA 2479-1] libxml2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2479-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2012 http://www.debian.org/security/faq -...
Stable Channel Update
The Chrome Stable channel has been updated to 19.0.1084.52 on Windows, Mac, Linux and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. 11740...
phpMyAdmin 2.11.x / 3.3.x < 2.11.11.3 / 3.3.9.2 SQL Query Bookmarks Arbitrary SQL Query Execution (PMASA-2011-02)
According to its self-identified version number, the phpMyAdmin install hosted on the remote web server allows creation of bookmarked SQL queries which could be unintentionally executed by other users. Note that successful exploitation of this vulnerability requires that phpMyAdmin configuration...