6376 matches found
Code injection
Google Chrome before 9.0.597.107 does not properly perform SVG rendering, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via unknown vectors...
CVE-2011-1116
Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...
CVE-2011-1111
Google Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via unknown vectors...
CVE-2011-1121
Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element...
CVE-2011-1121
Removed by vendor...
CVE-2011-1114
Removed by vendor...
CVE-2011-1119
Removed by vendor...
CVE-2011-1111
Removed by vendor...
CVE-2010-4649
Integer overflow in the ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a large value of a certain structure member...
CVE-2011-0712
Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to 1 the sndusbcaiaqaudioinit...
DSA-2166-1 chromium-browser - several
Bulletin has no description...
CVE-2011-0985
Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors...
CVE-2011-0983
Removed by vendor...
CVE-2011-0780
The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows user-assisted remote attackers to cause a denial of service application crash or possibly have unspecified other impact via unknown vectors...
CVE-2011-0777
Removed by vendor...
CVE-2011-0780
Removed by vendor...
CVE-2010-4726
Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669...
CVE-2010-4724
Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors...
Design/Logic Flaw
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...