2011

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attacker

The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in t

Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.

Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attack

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which al

The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 reli

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attacker

Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in Worl

The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies fro

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a de

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a de

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a de

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a de

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Exp

Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitra

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of ser

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handli

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection

Google Chrome before 13.0.782.107 does not properly handle nested functions in PDF documents, which allows remote attack

Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial o

Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote at

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 allows remote attackers to obtain potentially sensitive information about client-side

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 does not properly restrict access to internal schemes, which allows remote attackers t

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Skia, as used in Google Chrome before 13.0.782.107, allows remote attackers to cause a d

Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to

Google Chrome before 13.0.782.107 does not properly perform text iteration, which allows remote attackers to cause a den

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attacker

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted r

Google Chrome before 13.0.782.107 does not properly address re-entrancy issues associated with the GPU lock, which allow

Google Chrome before 13.0.782.107 does not ensure that the speech-input bubble is shown on the product's screen, which m

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page,

Google Chrome before 13.0.782.107 allows remote attackers to obtain sensitive information via a request for the GL progr

Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a b

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for

Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows

The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, wh

Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which m

Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to