Design/Logic Flaw

An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...

CVE-2011-1802

WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service memory corruption...

CVE-2011-1802

The CVE-2011-1802 entry concerns WebKit in Google Chrome prior to Blink M11/M12, where improper handling of counter nodes can cause memory corruption leading to a denial of service. The provided documents (NVD entry and duplicates in CNVD/UBU/CVE lists) consistently describe the issue as a memory...

CVE-2011-1803

CVE-2011-1803 is a vulnerability in WebKit’s SVGSMILElement handling (third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h) that can occur in Google Chrome before Blink M11/M12 when trying to access a removed SMIL element. The issue is reported across multiple corroborating sources an...

Integer overflow

An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function...

CVE-2011-1298

The CVE-2011-1298 entry describes an integer overflow in WebKit’s macOS WebCore::GraphicsContext::fillRect, affecting Google Chrome before Blink M11. Connected sources replicate the same root cause (integer overflow) within WebKit used by Chrome on macOS. The NVD entry confirms the vulnerability ...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1459

The CVE-2011-1459 entry affects Google Chrome prior to Blink M11, via the WebKit::WebPluginContainerImpl::handleEvent routine. The vulnerability arises when handling events with the htmlpluginelement.cpp plugin, allowing an attacker to cause a denial of service (crash). The cited sources confirm ...

CVE-2011-1459: Uncontrolled Resource Consumption

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2019-16649

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to...

CVE-2019-16649: Improper Authentication

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to...

Apache Tomcat Information Disclosure Vulnerability (CNVD-2017-04115)

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems. An information disclosure vulnerability exists in Apache...

CVE-2016-8747

An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request...

CVE-2016-8747

An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request...

PT-2017-9778 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 8.5.7 through 8.5.9 Apache Tomcat versions 9.0.0.M11 through 9.0.0.M15 Description: An information disclosure issue was discovered in Apache Tomcat in reverse-proxy configurations, allowing remote attackers to read data...

PT-2016-7120 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 8.5.0 through 8.5.6 Apache Tomcat versions 9.0.0.M1 through 9.0.0.M11 Description: The HTTP/2 header parser in Apache Tomcat entered an infinite loop if a header was received that was larger than the available buffer...