2011

Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, w

Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher fo

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configura

Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log f

Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web scrip

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote

Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before

Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Ser

ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementatio

Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of ser

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote a

Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a sess

Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which ha

Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to ha

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and att

Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a den

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via un

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows re

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial o

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of ser

Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a de

The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service

Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the

Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to caus

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service o

Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial o

Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denia

The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecifie

Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, w

Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unu

Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has un

Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code,

Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, w

Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspe

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a d

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sens

Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and poss

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable fi

Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via

Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to re

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial