Total
2696 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2011-1845 | 1 Microsoft | 1 Silverlight | 2011-07-14 | 7.8 HIGH | N/A |
Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or (2) a TextBlock or TextBox element. | |||||
CVE-2011-1844 | 1 Microsoft | 1 Silverlight | 2011-07-14 | 7.8 HIGH | N/A |
Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection. | |||||
CVE-2005-3501 | 1 Clamav | 1 Clamav | 2011-07-14 | 4.3 MEDIUM | N/A |
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length. | |||||
CVE-2011-2602 | 2 Microsoft, Nvidia | 2 Windows Xp, Geforce 310 Driver | 2011-07-12 | 7.1 HIGH | N/A |
The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK. | |||||
CVE-2011-2603 | 2 Apple, Nvidia | 2 Mac Os X, 9400m Driver | 2011-07-12 | 7.1 HIGH | N/A |
The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK. | |||||
CVE-2011-2604 | 2 Intel, Microsoft | 2 G41 Driver, Windows Xp | 2011-07-12 | 7.1 HIGH | N/A |
The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK. | |||||
CVE-2011-0949 | 1 Cisco | 1 Ios Xr | 2011-07-12 | 7.8 HIGH | N/A |
Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417. | |||||
CVE-2011-0943 | 1 Cisco | 1 Ios Xr | 2011-07-12 | 7.8 HIGH | N/A |
Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147. | |||||
CVE-2011-2619 | 1 Opera | 1 Opera Browser | 2011-07-11 | 5.0 MEDIUM | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS). | |||||
CVE-2011-2614 | 1 Opera | 1 Opera Browser | 2011-07-11 | 5.0 MEDIUM | N/A |
The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which many characters are drawn. | |||||
CVE-2011-2613 | 1 Opera | 1 Opera Browser | 2011-07-11 | 5.0 MEDIUM | N/A |
The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that contains initial holes. | |||||
CVE-2011-2618 | 1 Opera | 1 Opera Browser | 2011-07-11 | 5.0 MEDIUM | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows. | |||||
CVE-2011-2625 | 1 Opera | 1 Opera Browser | 2011-07-08 | 5.0 MEDIUM | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements. | |||||
CVE-2011-2626 | 1 Opera | 1 Opera Browser | 2011-07-08 | 5.0 MEDIUM | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element. | |||||
CVE-2011-2624 | 1 Opera | 1 Opera Browser | 2011-07-08 | 4.3 MEDIUM | N/A |
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview. | |||||
CVE-2011-2635 | 1 Opera | 1 Opera Browser | 2011-07-06 | 5.0 MEDIUM | N/A |
The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via vectors involving use of the :hover pseudo-class, in conjunction with transforms, for a floated element. | |||||
CVE-2011-2641 | 1 Opera | 1 Opera Browser | 2011-07-05 | 5.0 MEDIUM | N/A |
Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value. | |||||
CVE-2011-2639 | 1 Opera | 1 Opera Browser | 2011-07-05 | 5.0 MEDIUM | N/A |
Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service (CPU consumption) via an image file that triggers continual repaints. | |||||
CVE-2011-1757 | 1 Brad Fitzpatrick | 1 Djabberd | 2011-06-28 | 5.0 MEDIUM | N/A |
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. | |||||
CVE-2011-2206 | 1 Brad Fitzpatrick | 1 Djabberd | 2011-06-28 | 5.5 MEDIUM | N/A |
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757. |