Archive
February 2010
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —
Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows atta…
-
Unscored —
Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to…
-
Unscored —CVE-2010-0707 Public exploit
Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attac…
-
Unscored —CVE-2010-0706 Public exploit
Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows r…
-
Unscored —CVE-2010-0705 Public exploit
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly…
-
Unscored —
stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers …
-
Unscored —
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows …
-
Unscored —
Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary file…
-
Unscored —
Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows re…
-
Unscored —
gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option…
-
Unscored —
gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and applicatio…
-
Unscored —CVE-2010-0426 Public exploit
sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name…
-
Unscored —
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML det…
-
Unscored —
gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog …
-
Unscored —CVE-2010-0700 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2010-0703 Public exploit
Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary…
-
Unscored —
Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject ar…
-
Unscored —CVE-2010-0698 Public exploit
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbit…
-
Unscored —CVE-2010-0701 Public exploit
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute a…
-
Unscored —
Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated us…
-
Unscored —
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus,…
-
Unscored —
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Ado…
-
Unscored —
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct reques…
-
Unscored —
SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.2…
-
Unscored —CVE-2010-0702 Public exploit
SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to …
-
Unscored —
The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 …
-
Unscored —CVE-2009-3036 Public exploit
Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote …
-
Unscored —CVE-2010-0691 Public exploit
SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-0694 Public exploit
SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote at…
-
Unscored —
SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! all…
-
Unscored —CVE-2010-0693 Public exploit
SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute…
-
Unscored —
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 throu…
-
Unscored —CVE-2010-0695 Public exploit
Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2010-0690 Public exploit
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arb…
-
Unscored —CVE-2010-0678 Public exploit
PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earli…
-
Unscored —CVE-2010-0677 Public exploit
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attacker…