deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0471
Published: 2011-01-14
Description: The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=65764; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70454
CVE: CVE-2011-0472
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.
CVSS Score: 9.3 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=66334; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70455
CVE: CVE-2011-0473
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVSS Score: 10.0 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=66560; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70456
CVE: CVE-2011-0474
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVSS Score: 10.0 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=66748; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70457
CVE: CVE-2011-0475
Published: 2011-01-14
Description: Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=67100; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70458
CVE: CVE-2011-0476
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=67208; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70459
CVE: CVE-2011-0477
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=67303; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70460
CVE: CVE-2011-0478
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=67363; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70461
CVE: CVE-2011-0479
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: http://code.google.com/p/chromium/issues/detail?id=67393; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70462
CVE: CVE-2011-0480
Published: 2011-01-14
Description: Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
CVSS Score: 9.3 (HIGH)
CWE: CWE-120
References: http://article.gmane.org/gmane.comp.video.ffmpeg.devel/122703; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610550; http://code.google.com/p/chromium/issues/detail?id=68115
CVE: CVE-2011-0481
Published: 2011-01-14
Description: Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.
CVSS Score: 9.3 (HIGH)
CWE: CWE-120
References: http://code.google.com/p/chromium/issues/detail?id=68170; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70464
CVE: CVE-2011-0482
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-704
References: http://code.google.com/p/chromium/issues/detail?id=68178; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
CVE: CVE-2011-0483
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-704
References: http://code.google.com/p/chromium/issues/detail?id=68181; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70466
CVE: CVE-2011-0484
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=68439; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70467
CVE: CVE-2011-0485
Published: 2011-01-14
Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=68666; http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html; http://osvdb.org/70468
CVE: CVE-2010-4694
Published: 2011-01-14
Description: Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978; http://bugs.gentoo.org/show_bug.cgi?id=346501; http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?revision=HEAD&root=extras&view=markup
CVE: CVE-2010-4695
Published: 2011-01-14
Description: A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories via a crafted command-line argument, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978; http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&r1=1.1&r2=1.2; http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log
CVE: CVE-2010-3833
Published: 2011-01-14
Description: MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ... SELECT."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://bugs.mysql.com/bug.php?id=55826; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
CVE: CVE-2010-3834
Published: 2011-01-14
Description: Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=55568; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
CVE: CVE-2010-3835
Published: 2011-01-14
Description: MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-189
References: http://bugs.mysql.com/bug.php?id=55564; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html; http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
CVE: CVE-2010-3836
Published: 2011-01-14
Description: MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://bugs.mysql.com/bug.php?id=54568; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
CVE: CVE-2010-3837
Published: 2011-01-14
Description: MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://bugs.mysql.com/bug.php?id=54476; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
CVE: CVE-2010-3838
Published: 2011-01-14
Description: MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result is "processed using an intermediate temporary table."
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=54461; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
CVE: CVE-2010-3839
Published: 2011-01-14
Description: MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=53544; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html; http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
CVE: CVE-2010-3840
Published: 2011-01-14
Description: The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=51875; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html; http://lists.mysql.com/commits/117094
CVE: CVE-2010-0115
Published: 2011-01-14
Description: SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/70415; http://secunia.com/advisories/42878; http://www.securityfocus.com/bid/45742
CVE: CVE-2010-3086
Published: 2011-01-14
Description: include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9d55b9923a1b7ea8193b8875c57ec940dc2ff027; http://kerneltrap.org/mailarchive/linux-kernel/2008/2/6/752194/thread; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
CVE: CVE-2010-4335
Published: 2011-01-14
Description: The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://malloc.im/CakePHP-unserialize.txt; http://packetstormsecurity.org/files/view/95847/burnedcake.py.txt; http://secunia.com/advisories/42211
CVE: CVE-2010-4337
Published: 2011-01-14
Description: The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnings.$$, or (3) /tmp/gnash-configure-recommended.$$ files.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605419; http://secunia.com/advisories/42416; http://secunia.com/advisories/48466
CVE: CVE-2010-4339
Published: 2011-01-14
Description: Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598743; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598743
CVE: CVE-2010-4566
Published: 2011-01-14
Description: The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.
CVSS Score: 9.3 (HIGH)
References: http://securityreason.com/securityalert/8119; http://support.citrix.com/article/CTX127613; http://www.exploit-db.com/exploits/16916
CVE: CVE-2009-5051
Published: 2011-01-18
Description: Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://www.hastymail.org/security/; https://exchange.xforce.ibmcloud.com/vulnerabilities/64891; http://www.hastymail.org/security/
CVE: CVE-2010-4166
Published: 2011-01-18
Description: Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action to index.php, or (3) the filter_order_Dir parameter in a com_messages action to administrator/index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0514.html; http://developer.joomla.org/security/news/9-security/10-core-security/[PII_REDACTED]1-core-sqli-info-disclosurevulnerabilities.html; http://openwall.com/lists/oss-security/2010/11/12/5
CVE: CVE-2010-4263
Published: 2011-01-18
Description: The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.
CVSS Score: 7.9 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=31b24b955c3ebbb6f3008a6374e61cf7c05a193c; http://openwall.com/lists/oss-security/2010/12/06/3; http://openwall.com/lists/oss-security/2010/12/06/9
CVE: CVE-2010-4530
Published: 2011-01-18
Description: Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow.  NOTE: some sources refer to this issue as an integer overflow.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-189
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-libccid-buffer-overflow_2010-12-13.pdf; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053076.html
CVE: CVE-2010-4531
Published: 2011-01-18
Description: Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607781; http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-atr-handler-buffer-overflow_2010-12-13.pdf; http://lists.alioth.debian.org/pipermail/pcsclite-cvs-commit/2010-November/004923.html
CVE: CVE-2010-4646
Published: 2011-01-18
Description: Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2011/01/05/3; http://openwall.com/lists/oss-security/2011/01/06/14; http://www.hastymail.org/security/
CVE: CVE-2010-4696
Published: 2011-01-18
Description: Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://developer.joomla.org/security/news/9-security/10-core-security/[PII_REDACTED]1-core-sqli-info-disclosurevulnerabilities.html; http://openwall.com/lists/oss-security/2010/11/12/5; http://openwall.com/lists/oss-security/2010/11/12/6
CVE: CVE-2011-0010
Published: 2011-01-18
Description: check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609641; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html
CVE: CVE-2011-0272
Published: 2011-01-18
Description: Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 5002, related to the HttpTunnel feature.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/70432; http://secunia.com/advisories/42898; http://securitytracker.com/id?1024956
CVE: CVE-2011-0408
Published: 2011-01-18
Description: pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the png_do_expand_palette function, the png_do_rgb_to_gray function, and an integer underflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-1.5.0-diff.txt; ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-README.txt; http://osvdb.org/70417
CVE: CVE-2011-0486
Published: 2011-01-18
Description: Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/70485; http://securitytracker.com/id?1024954; http://www-01.ibm.com/support/docview.wss?uid=swg24026110
CVE: CVE-2011-0487
Published: 2011-01-18
Description: ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/70486; http://www.kb.cert.org/vuls/id/680540; http://www.securityfocus.com/archive/1/515724/100/0/threaded