|
299291
|
- |
|
google
|
chrome
|
The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted exte…
|
CWE-20
Improper Input Validation
|
CVE-2011-2785
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299292
|
- |
|
google
|
chrome
|
Google Chrome before 13.0.782.107 allows remote attackers to obtain sensitive information via a request for the GL program log, which reveals a local path in an unspecified log entry.
|
CWE-200
Information Exposure
|
CVE-2011-2784
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299293
|
- |
|
google
|
chrome
|
Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product…
|
CWE-20
Improper Input Validation
|
CVE-2011-2783
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299294
|
- |
|
google
|
chrome
|
The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access r…
|
CWE-276
Incorrect Default Permissions
|
CVE-2011-2782
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299295
|
- |
|
lars_hjemli
|
cgit
|
Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filen…
|
CWE-79
Cross-site Scripting
|
CVE-2011-2711
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299296
|
- |
|
google
|
chrome
|
The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a craf…
|
CWE-287
Improper Authentication
|
CVE-2011-2361
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299297
|
- |
|
google
|
chrome
|
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via…
|
NVD-CWE-noinfo
|
CVE-2011-2360
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299298
|
- |
|
google apple debian
|
chrome iphone_os itunes safari debian_linux
|
Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown…
|
CWE-20
Improper Input Validation
|
CVE-2011-2359
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299299
|
- |
|
google
|
chrome
|
Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via …
|
CWE-20
Improper Input Validation
|
CVE-2011-2358
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299300
|
- |
|
phpmyadmin
|
phpmyadmin
|
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attac…
|
CWE-20
Improper Input Validation
|
CVE-2011-2719
|
2024-11-21 10:28 |
2011-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|