|
301081
|
- |
|
google
|
chrome
|
The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access r…
|
CWE-276
Incorrect Default Permissions
|
CVE-2011-2782
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301082
|
- |
|
lars_hjemli
|
cgit
|
Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filen…
|
CWE-79
Cross-site Scripting
|
CVE-2011-2711
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301083
|
- |
|
google
|
chrome
|
The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a craf…
|
CWE-287
Improper Authentication
|
CVE-2011-2361
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301084
|
- |
|
google
|
chrome
|
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via…
|
NVD-CWE-noinfo
|
CVE-2011-2360
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301085
|
- |
|
google apple debian
|
chrome iphone_os itunes safari debian_linux
|
Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown…
|
CWE-20
Improper Input Validation
|
CVE-2011-2359
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301086
|
- |
|
google
|
chrome
|
Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via …
|
CWE-20
Improper Input Validation
|
CVE-2011-2358
|
2024-11-21 10:28 |
2011-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301087
|
- |
|
phpmyadmin
|
phpmyadmin
|
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attac…
|
CWE-20
Improper Input Validation
|
CVE-2011-2719
|
2024-11-21 10:28 |
2011-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301088
|
- |
|
phpmyadmin
|
phpmyadmin
|
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files v…
|
CWE-22
Path Traversal
|
CVE-2011-2718
|
2024-11-21 10:28 |
2011-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301089
|
- |
|
osgeo umn
|
mapserver
|
Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-2704
|
2024-11-21 10:28 |
2011-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
301090
|
- |
|
osgeo umn
|
mapserver
|
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filte…
|
CWE-89
SQL Injection
|
CVE-2011-2703
|
2024-11-21 10:28 |
2011-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|