Skip to content
OpenAdvisories

Archive

August 2011

Vulnerabilities first published in this month (UTC), newest first.

← July 2011 2011 / August September 2011 →
  1. 113
  2. 2 
  3. 331
  4. 411
  5. 59
  6. 6 
  7. 7 
  8. 8 
  9. 923
  10. 1047
  11. 1117
  12. 1211
  13. 13 
  14. 14 
  15. 1513
  16. 164
  17. 17 
  18. 1830
  19. 1912
  20. 20 
  21. 21 
  22. 22 
  23. 2313
  24. 247
  25. 259
  26. 26 
  27. 27 
  28. 28 
  29. 2937
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

294 results · Feed

  • Unscored —
    CVE-2011-0249

    Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —
    CVE-2011-0247

    Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2011-0250

    Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —
    CVE-2011-0246

    Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2011-0252

    Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —
    CVE-2011-0248

    Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Ex…

  • Unscored —
    CVE-2011-0251

    Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —
    CVE-2011-1412

    sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena …

    ioquake3 openarena Debian Ubuntu
  • Unscored —
    CVE-2011-2701

    The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies fr…

  • Unscored —
    CVE-2011-2764

    The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in Wor…

    ioquake3 openarena openarena Debian Ubuntu
  • Unscored —
    CVE-2011-2711

    Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows…

  • Unscored —
    CVE-2011-2791

    The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attacke…

  • Unscored —
    CVE-2011-2798

    Google Chrome before 13.0.782.107 does not properly restrict access to internal schemes, which allows remote attackers …

  • Unscored —
    CVE-2011-2359

    Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to…

  • Unscored —
    CVE-2011-2794

    Google Chrome before 13.0.782.107 does not properly perform text iteration, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2011-2799

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2800

    Google Chrome before 13.0.782.107 allows remote attackers to obtain potentially sensitive information about client-side…

  • Unscored —
    CVE-2011-2793

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2797

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2802

    Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote a…

  • Unscored —
    CVE-2011-2790

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2782

    The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions fo…

  • Unscored —
    CVE-2011-2358

    Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which…

  • Unscored —
    CVE-2011-2805

    Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection…

  • Unscored —
    CVE-2011-2785

    The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page…

  • Unscored —
    CVE-2011-2804

    Google Chrome before 13.0.782.107 does not properly handle nested functions in PDF documents, which allows remote attac…

  • Unscored —
    CVE-2011-2819

    Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handl…

  • Unscored —
    CVE-2011-2786

    Google Chrome before 13.0.782.107 does not ensure that the speech-input bubble is shown on the product's screen, which …

  • Unscored —
    CVE-2011-2361

    The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, w…

  • Unscored —
    CVE-2011-2787

    Google Chrome before 13.0.782.107 does not properly address re-entrancy issues associated with the GPU lock, which allo…

  • Unscored —
    CVE-2011-2789

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2783

    Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a …

  • Unscored —
    CVE-2011-2801

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2796

    Use-after-free vulnerability in Skia, as used in Google Chrome before 13.0.782.107, allows remote attackers to cause a …

  • Unscored —
    CVE-2011-2792

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2360

    Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which …

  • Unscored —
    CVE-2011-2803

    Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial …

  • Unscored —
    CVE-2011-2795

    Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to…

  • Unscored —
    CVE-2011-2788

    Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted …

  • Unscored —
    CVE-2011-2818

    Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service …