Archive
March 2011
Vulnerabilities first published in this month (UTC), newest first.
355 results · Feed
-
Medium —
Apache Tomcat does not follow ServletSecurity annotations
Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exist…
-
Unscored —
libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated use…
-
Medium —
Apache Tomcat allows remote attackers to bypass intended access restrictions
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
-
Unscored —
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with…
-
Unscored —
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, whic…
-
Unscored —
MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allo…
-
Unscored —
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspe…
-
Unscored —
WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to b…
-
Unscored —
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources…
-
Unscored —
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote att…
-
Unscored —
Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which…
-
Unscored —
The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies d…
-
Unscored —CVE-2011-0167 Public exploit
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Poli…
-
Unscored —
The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS be…
-
Unscored —
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to cre…
-
Unscored —
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in G…
-
Unscored —
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary comman…
-
Unscored —
Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4…
-
Unscored —
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a den…
-
Unscored —
The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of mem…
-
Unscored —
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Servi…
-
Unscored —
Google Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote attackers to cause a d…
-
Unscored —
Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, wh…
-
Unscored —
Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a de…
-
Unscored —
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial…
-
Unscored —
Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to ca…
-
Unscored —
The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which…
-
Unscored —
The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a …
-
Unscored —
Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possib…
-
Unscored —
The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or po…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service …
-
Unscored —
Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial …
-
Unscored —
Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, wh…
-
Unscored —
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, rel…
-
Unscored —
Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via u…
-
Unscored —
Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a deni…
-
Unscored —
The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of serv…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service …
-
Unscored —
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin P…