|
297991
|
- |
|
mantisbt
|
mantisbt
|
Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as demonstrated by the pr…
|
CWE-79
Cross-site Scripting
|
CVE-2011-2938
|
2024-11-21 10:29 |
2011-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297992
|
- |
|
roundcube
|
webmail
|
Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to t…
|
CWE-79
Cross-site Scripting
|
CVE-2011-2937
|
2024-11-21 10:29 |
2011-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297993
|
- |
|
redhat
|
enterprise_mrg
|
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized…
|
CWE-287
Improper Authentication
|
CVE-2011-2925
|
2024-11-21 10:29 |
2011-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297994
|
- |
|
google
|
chrome
|
Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact…
|
CWE-843
Type Confusion
|
CVE-2011-2875
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297995
|
- |
|
google
|
chrome
|
Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors.
|
CWE-295
Improper Certificate Validation
|
CVE-2011-2874
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297996
|
- |
|
google
|
chrome
|
Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
|
CWE-125
Out-of-bounds Read
|
CVE-2011-2864
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297997
|
- |
|
google
|
chrome
|
Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-2862
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297998
|
- |
|
google
|
chrome
|
Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read…
|
CWE-20
Improper Input Validation
|
CVE-2011-2861
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297999
|
- |
|
google apple
|
chrome iphone_os itunes safari
|
Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to table styles.
|
CWE-416
Use After Free
|
CVE-2011-2860
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298000
|
- |
|
google
|
chrome
|
Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and attack vectors.
|
CWE-276
Incorrect Default Permissions
|
CVE-2011-2859
|
2024-11-21 10:29 |
2011-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|