2011

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .ex

SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to

SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attacke

Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authe

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL comma

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers

Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p

Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCente

Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Respon

Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 all

Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtain

dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote a

The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other produc

gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure o

sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in Vide

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Pr

IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate e

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a d

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vec

Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers t

The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTI

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers t

Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1

reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x

chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not p

Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a

Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that ha

Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash)

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash)

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash)

The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of servi

Opera before 11.10 allows remote attackers to hijack (1) searches and (2) customizations via unspecified third party app

Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash)

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to caus

The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property

Opera before 11.11 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted

Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash)

Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary cod

Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of s

Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" t

Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that co

Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large tab