Archive
February 2010
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —
Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix…
-
Unscored —
Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a deni…
-
Unscored —
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in …
-
Unscored —
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows re…
-
Unscored —
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin lo…
-
Unscored —
Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow r…
-
Unscored —
The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failu…
-
Unscored —
Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a…
-
Unscored —CVE-2010-0655 Public exploit
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial…
-
Unscored —
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not i…
-
Unscored —
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restric…
-
Unscored —
Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89,…
-
Unscored —
Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrom…
-
Unscored —
Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect M…
-
Unscored —
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are …
-
Unscored —
Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_secu…
-
Unscored —
Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an in…
-
Unscored —
Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and …
-
Unscored —
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, a…
-
Unscored —
Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in…
-
Unscored —
WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an X…
-
Unscored —
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances in…
-
Unscored —
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not u…
-
Unscored —
Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbit…
-
Unscored —
browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials th…
-
Unscored —CVE-2010-0641 Public exploit
Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) …
-
Unscored —CVE-2010-0307 Public exploit
The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ens…
-
Unscored —CVE-2010-0642 Public exploit
Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded chara…
-
Unscored —CVE-2010-0415 Public exploit
The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which a…
-
Unscored —
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro securi…
-
Unscored —CVE-2009-3302 EPSS 12%
filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2009-3301 EPSS 12%
Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denia…
-
Unscored —CVE-2009-2950 EPSS 14%
Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in Open…
-
Unscored —CVE-2009-2949 EPSS 14%
Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3…
-
Unscored —
Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allow…
-
Unscored —
Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service…
-
Unscored —
The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling …
-
Unscored —CVE-2010-0639 EPSS 31%
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authenticati…
-
Unscored —
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-1…