2012

Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corrup

Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a deni

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might al

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a den

Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a

Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attacke

Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server

The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka Open Document XML) file

mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Bu

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS re

Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain acces

Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authent

Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to ove

Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users

Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styli

Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect

Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associ

Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) histor

Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for u

Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files v

@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information

CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attacke

Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client

compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) seque

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other pr

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which

Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrar

Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers

Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic

The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extensio

The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows

Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or

The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remo

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allo

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allo

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3

The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and con

The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before

CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote att

Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attacke

The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00,

The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickH

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eS

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7,