Archive
October 2010
Vulnerabilities first published in this month (UTC), newest first.
434 results · Feed
-
Unscored —
Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG docum…
-
Unscored —
Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensit…
-
Unscored —
Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoo…
-
Unscored —
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows r…
-
Unscored —
Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL…
-
Unscored —
Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of serv…
-
Unscored —
Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, whic…
-
Unscored —
Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a …
-
Unscored —
Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending …
-
Unscored —
The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which all…
-
Unscored —
Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lac…
-
Unscored —
Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial …
-
Unscored —
Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers …
-
Unscored —
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, wh…
-
Unscored —
Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via u…
-
Unscored —
Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a tr…
-
Unscored —
Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 …
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x…
-
Unscored —
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and S…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x bef…
-
Unscored —
Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey b…
-
Unscored —
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird b…
-
Unscored —
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.1…
-
Unscored —
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 …
-
Unscored —
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x bef…
-
Unscored —
Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunde…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.…
-
Unscored —
Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey b…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP AssetCenter 5.0x through AC_5.03, and AssetManager 5.1x through AM_5.12 …
-
Unscored —
IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X.509 certificate authenti…
-
Unscored —
Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remo…
-
Unscored —
The (1) texmacs and (2) tm_mupad_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD_LIBRARY_P…
-
Unscored —
TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges v…
-
Unscored —
The (1) mdb and (2) mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-leng…
-
Unscored —
startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to …
-
Unscored —
The (1) proofserv, (2) xrdcp, (3) xrdpwdadmin, and (4) xrd scripts in ROOT 5.18/00 place a zero-length directory name i…
-
Unscored —
vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows…
-
Unscored —
The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-l…
-
Unscored —
usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allo…
-
Unscored —
The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIB…