Archive
February 2010
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —
The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recog…
-
Unscored —
Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial …
-
Unscored —
Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-depend…
-
Unscored —
Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, DH, DP, and DQ Series allows local administrators …
-
Unscored —
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for wh…
-
Unscored —
chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet…
-
Unscored —
The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attacker…
-
Unscored —
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for sto…
-
Unscored —CVE-2010-0411 Public exploit
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp…
-
Unscored —
Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a clus…
-
Unscored —
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denia…
-
Unscored —
The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact v…
-
Unscored —
The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 all…
-
Unscored —
IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtai…
-
Unscored —
IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which h…
-
Unscored —
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP add…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP add…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does …
-
Unscored —
Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging f…
-
Unscored —
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to injec…
-
Unscored —CVE-2003-1582 EPSS 10%
Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —CVE-2010-0555 EPSS 21%
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML doc…
-
Unscored —
HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication…
-
Unscored —CVE-2010-0552 Public exploit
Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibl…
-
Unscored —
admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remo…
-
Unscored —
Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 565…
-
Unscored —
Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through …
-
Unscored —CVE-2010-0255 EPSS 37%
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML doc…
-
Unscored —
The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication…
-
Unscored —CVE-2010-0553 Public exploit
Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) a…
-
Unscored —
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) …
-
Unscored —CVE-2010-0303 Public exploit
mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a …
-
Unscored —
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .m…
-
Unscored —
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and …