Skip to content
OpenAdvisories

Archive

5 February 2010

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2010-0557 Public exploit EPSS 52%

    IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denia…

  • Unscored —

    The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact v…

  • Unscored —

    The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact v…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 all…

  • Unscored —

    IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtai…

  • Unscored —

    IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which h…

  • Unscored —

    Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP add…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML vi…

  • Unscored —

    Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP add…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML vi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —

    The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does …

  • Unscored —

    Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging f…

  • Unscored —

    The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to injec…

  • Unscored —
    CVE-2003-1582 EPSS 10%

    Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML vi…