Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.

Tahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some cases.

systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.

Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.

rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started.

OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.