Skip to content
OpenAdvisories

Archive

22 March 2012

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magi…

  • Unscored —

    The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allow…

  • Unscored —

    The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows rem…

  • Unscored —

    Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 all…

  • High 8.8

    Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chr…

  • Unscored —

    The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extensi…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service o…

  • Unscored —

    Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 all…

  • Unscored —

    Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vector…

  • Unscored —

    Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASL…

  • Unscored —

    Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmwar…

  • Unscored —

    The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and co…

  • Unscored —

    AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remo…

  • Unscored —

    The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 ta…

  • Unscored —

    Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.…

  • Unscored —

    Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.ph…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware befo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attack…

  • Unscored —

    Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a cr…

  • Unscored —

    CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote at…

  • Unscored —

    The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before…