Skip to content
OpenAdvisories

Archive

17 September 2011

Vulnerabilities first published on this day (UTC), newest first.

38 results · Feed

  • Unscored —

    EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sen…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of se…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2011-3575 Public exploit EPSS 11%

    Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Se…

  • Unscored —

    Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server befor…

  • Unscored —

    ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementati…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service …

  • Unscored —

    Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service …

  • Unscored —

    Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote …

  • Unscored —
    CVE-2011-2841 Public exploit

    Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, …

  • Unscored —

    Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cau…

  • Unscored —

    Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial …

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a d…

  • Unscored —

    Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, …

  • Unscored —

    Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a …

  • Unscored —

    Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code,…

  • Unscored —

    Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "un…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to h…

  • Unscored —

    Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which h…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service …

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a de…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows r…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-2738 EPSS 11%

    Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service …

  • Unscored —

    Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a ses…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of se…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial …

  • Unscored —

    Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via u…

  • Unscored —

    Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unsp…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a…

  • Unscored —

    Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and at…

  • Unscored —

    The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecifi…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has u…

  • Unscored —

    Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a deni…

  • Unscored —

    The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service…