2011

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct r

ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re

AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .p

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .p

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which r

Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thr

crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easi

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solar

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows

Cross-site scripting (XSS) vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attacker

Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote attackers to inject arbitrary

Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to in

Multiple cross-site scripting (XSS) vulnerabilities in config_defaults_inc.php in MantisBT before 1.2.8 allow remote att

Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to

Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remot

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6

Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed ca

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2

Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, w

Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher fo

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configura

Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log f

Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web scrip

Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before

Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Ser

Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of ser

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote a

Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a sess

Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a

Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to ha

Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and att

Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a den

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows re

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial o

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of ser

Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a de

The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service