Skip to content
OpenAdvisories

Archive

11 February 2010

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —

    gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce …

  • Unscored —

    gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes u…

  • Unscored —

    gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended…

  • Unscored —
    CVE-2010-0614 Public exploit

    SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2010-0610 Public exploit

    Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to…

  • Unscored —
    CVE-2010-0605 Public exploit

    SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "St…

  • Unscored —

    Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encrypti…

  • Unscored —

    evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain priv…

  • Unscored —

    Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 …

  • Unscored —

    Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights.

  • Unscored —

    Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execut…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary w…

  • Unscored —

    Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2010-0608 Public exploit

    SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption…

  • Unscored —
    CVE-2010-0611 Public exploit

    Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to exec…

  • Unscored —
    CVE-2010-0607 Public exploit

    Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote at…

  • Unscored —

    SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated us…

  • Unscored —

    The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda Acti…