Archive
February 2010
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —
The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain r…
-
Unscored —
The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unl…
-
Unscored —
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Ac…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki…
-
Unscored —
Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Acce…
-
Medium 6.5
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Servic…
KEV Mar 7, 2022 -
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow…
-
Unscored —CVE-2010-0631 Public exploit
Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allo…
-
Unscored —
Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentic…
-
Unscored —
Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
-
Unscored —CVE-2010-0630 Public exploit
SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-0632 Public exploit
SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote a…
-
Unscored —
SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugi…
-
Unscored —CVE-2001-1586 Public exploit
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary pro…
-
Unscored —
Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to…
-
Unscored —
Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected co…
-
Unscored —
Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c i…
-
Unscored —
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Pr…
-
Unscored —
The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly …
-
Unscored —
The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining…
-
Unscored —
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce …
-
Unscored —
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes u…
-
Unscored —
gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended…
-
Unscored —CVE-2010-0614 Public exploit
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2010-0610 Public exploit
Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to…
-
Unscored —CVE-2010-0605 Public exploit
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "St…
-
Unscored —
Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encrypti…
-
Unscored —
evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain priv…
-
Unscored —
Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 …
-
Unscored —
Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights.
-
Unscored —
Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web…
-
Unscored —
Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary w…
-
Unscored —
Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary …
-
Unscored —CVE-2010-0608 Public exploit
SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption…
-
Unscored —CVE-2010-0611 Public exploit
Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to exec…
-
Unscored —CVE-2010-0607 Public exploit
Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote at…
-
Unscored —
SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands …