CVE-2010-3248

Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors...

Memory corruption

The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2010-3255

Removed by vendor...

Memory corruption

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...

CVE-2010-3119

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2010-3112

Removed by vendor...

Format string

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

Design/Logic Flaw

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

CVE-2010-2238

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

CVE-2010-2971

CVE-2010-2971 concerns the libmikmod loader load_it.c, where a mismatch in handling name##env versus name##tick/name##node can cause a buffer over-read when processing Impulse Tracker files. The issue is a follow-up to CVE-2009-3995, with the CVE details noting a remote attacker could trigger the...

CVE-2010-2540

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments...

CVE-2010-2902

The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2010-2902

The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2009-4952

Directory traversal vulnerability in the Directory Listing dirlisting extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact via unknown vectors...

Directory traversal

Directory traversal vulnerability in the Directory Listing dirlisting extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2010-1972

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...

Default configuration

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...

CVE-2010-1766

Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service memory corruption or possibly have unspecified other...