2012

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt be

The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly i

Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote

Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote a

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1

ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporar

Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 a

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 thr

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fu

Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL conte

Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) vi

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaSc

Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters

Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positi

Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that con

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a cra

Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigatio

Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderat

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed c

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cros

Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-

Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier f

Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary we

Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA21

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allo

Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easi

Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated user

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows rem

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authent

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote atta

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry be

Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the a

The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of ser

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory con

Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rend

Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Render

The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 u

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to

Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to ca

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allo

kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending tasks

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain

The osf_wait4 function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an

The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform doe

Integer signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4

Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6

Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel Same

The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory all

The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME