2012

Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attacker

Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obt

Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a de

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to c

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control th

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies

Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r

Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allow

Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrar

Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x be

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 b

The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote at

The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which a

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service cr

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authe

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and

Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory paramet

SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remo

Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADM

Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user acco

The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote auth

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to adm

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obt

Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 all

SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery

The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GE

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is

The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an in

Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of

The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of

The Antivirus component in Comodo Internet Security before 4.1.150349.920 allows remote attackers to cause a denial of s

The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of se

The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of se

Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via

The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of

The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of

Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook han

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode

Race condition in VirusBuster Internet Security Suite 3.2 on Windows XP allows local users to bypass kernel-mode hook ha

Race condition in VBA32 Personal 3.12.12.4 on Windows XP allows local users to bypass kernel-mode hook handlers, and exe

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kern

Race condition in ThreatFire 4.7.0.17 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute

Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook

Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers,

Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and ex