CVE-2011-XXXX

28.07.2011, Citrix - Citrix XenApp / XenDesktop XML Service Heap Corruption could result in arbitrary code execution (http://support.citrix.com/article/CTX129430)CVE: CVE-2011-XXXX, OSVDB ID: not assigned so far

CVE-2010-3020

16.08.2010, Opera - Opera Web Browser (desktop and mobile versions) Insufficient Filtering allows subscriptions to arbitrary feeds or other malicious actions without interactionCVE: CVE-2010-3020, OSVDB ID: 67202

CVE-2009-2991

13.10.2009, Adobe - Adobe Reader Plug-in for Mozilla Unloading Use-after-free Arbitrary Code ExecutionCVE: CVE-2009-2991, OSVDB ID: 58925

CVE-2009-2200

11.08.2009, Apple - WebKit Open Source Project and Apple Safari "pluginspace" URI Scheme Remote Information DisclosureCVE: CVE-2009-2200, BID: 36024

CVE-2009-2421

23.06.2009, Apple - Apple Safari "CFCharacterSetInitInlineBuffer()" Remote Denial Of Service VulnerabilityCVE: CVE-2009-2421, BID: 35481

CVE-2009-2420

23.06.2009, Apple - Apple Safari "file://" Protocol Handler Information Disclosure and Denial of Service VulnerabilityCVE: CVE-2009-2420, BID: 35482

CVE-2008-5679

16.12.2009, Opera - Opera Web Browser HTML Parsing Heap-Based Remote Code Execution VulnerabilityCVE: CVE-2008-5679, BID: 32891

CVE-2008-3824

10.09.2008, Horde - Horde Application Framework Forward Slash Insufficient Filtering Cross-Site Scripting VulnerabilityCVE: CVE-2008-3824, BID: 31107

CVE-2008-3823

10.09.2008, Horde - Horde MIME Attachment Filename Insufficient Filtering Cross-Site Scripting VulnerabilityCVE: CVE-2008-3823, BID: 31110

oCert 2008-012

10.09.2008, Horde - Horde, Popoon frameworks common input sanitization errors (XSS)oCERT: 2008-012

CVE-2007-1639

14.03.2007, PHProjekt - Execution of arbitrary PHP code using an unrestricted file uploadCVE: CVE-2007-1639, OSVDB ID: 35162

CVE-2007-1638

14.03.2007, PHProjekt - Cross-Site Request ForgeryCVE: CVE-2007-1638, BID: 22955

CVE-2007-1576

14.03.2007, PHProjekt - Multiple Cross-Site Scripting VulnerabilitiesCVE: CVE-2007-1576, BID: 22957

CVE-2007-1575

14.03.2007, PHProjekt - Blind SQL InjectionCVE: CVE-2007-1575, BID: 22956

Weitere Bugs

Ghostscript Bug 691541 - Infinite recursion and crash in bezier() functionApple Safari & Quicktime Denial of Service - A null pointer is being dereference when CFRelease() is called on NULLFirefox Bug 432561 - CSS parser stack overflow parsing lots of '{' - CSSParserImpl::SkipUntil recursionPHP Bug 16720 - fatal error using MS ADOX-library (NULL pointer dereference)