19 March 2010

35 results · Feed

• Unscored —
  CVE-2010-1028

  Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 …

  calibre Debian
  Mar 19, 2010
• Unscored —
  CVE-2010-1029 Public exploit EPSS 12%

  Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Sa…

  Mar 19, 2010
• Unscored —
  CVE-2010-0688 Public exploit EPSS 38%

  Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via …

  Mar 19, 2010
• Unscored —
  CVE-2010-1003 Public exploit

  Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote…

  Mar 19, 2010
• Unscored —
  CVE-2010-0734

  content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of cal…

  curl Debian
  Mar 19, 2010
• Unscored —
  CVE-2010-0008

  The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to caus…

  Mar 19, 2010
• Unscored —
  CVE-2010-0732

  gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows …

  gtk+2.0 Debian
  Mar 19, 2010
• Unscored —
  CVE-2010-0736

  Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1…

  Mar 19, 2010
• Unscored —
  CVE-2010-0465

  Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.…

  Mar 19, 2010
• Unscored —
  CVE-2010-0733 Public exploit

  Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows …

  Mar 19, 2010
• Unscored —
  CVE-2009-4271

  The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to cause a denial of service…

  Mar 19, 2010
• Unscored —
  CVE-2010-1021

  Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows…

  Mar 19, 2010
• Unscored —
  CVE-2010-1027

  SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote at…

  Mar 19, 2010
• Unscored —
  CVE-2010-1013

  SQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension before 0.7.13 for TYPO…

  Mar 19, 2010
• Unscored —
  CVE-2010-1007

  Unspecified vulnerability in the Power Extension Manager (ch_lightem) extension 1.0.34 and earlier for TYPO3 allows rem…

  Mar 19, 2010
• Unscored —
  CVE-2010-1019

  SQL injection vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remot…

  Mar 19, 2010
• Unscored —
  CVE-2010-1015

  SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remot…

  Mar 19, 2010
• Unscored —
  CVE-2010-1004

  SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remo…

  Mar 19, 2010
• Unscored —
  CVE-2010-1010

  SQL injection vulnerability in the MK Wastebasket (mk_wastebasket) extension 2.1.0 and earlier for TYPO3 allows remote …

  Mar 19, 2010
• Unscored —
  CVE-2010-1018

  SQL injection vulnerability in the Book Reviews (sk_bookreview) extension 0.0.12 and earlier for TYPO3 allows remote at…

  Mar 19, 2010
• Unscored —
  CVE-2010-1022

  The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attac…

  Mar 19, 2010
• Unscored —
  CVE-2010-1012

  SQL injection vulnerability in the CleanDB (nf_cleandb) extension 1.0.7 and earlier for TYPO3 allows remote attackers t…

  Mar 19, 2010
• Unscored —
  CVE-2010-1005

  Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO…

  Mar 19, 2010
• Unscored —
  CVE-2010-1014

  Cross-site scripting (XSS) vulnerability in the Reports Logfile View (reports_logview) extension 1.2.1 and earlier for …

  Mar 19, 2010
• Unscored —
  CVE-2010-1023

  Cross-site scripting (XSS) vulnerability in the UserTask Center, Recent (taskcenter_recent) extension 0.1.0 and earlier…

  Mar 19, 2010
• Unscored —
  CVE-2010-1026

  SQL injection vulnerability in the CleanDB - DBAL (tmsw_cleandb) extension 2.1.0 and earlier for TYPO3 allows remote at…

  Mar 19, 2010
• Unscored —
  CVE-2010-1017

  SQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5 for TYPO3 allows remote…

  Mar 19, 2010
• Unscored —
  CVE-2010-1008

  Cross-site scripting (XSS) vulnerability in the Sellector.com Widget Integration (chsellector) extension before 0.1.2 f…

  Mar 19, 2010
• Unscored —
  CVE-2010-1016

  SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows …

  Mar 19, 2010
• Unscored —
  CVE-2010-1006

  SQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows remote attackers to execu…

  Mar 19, 2010
• Unscored —
  CVE-2010-1020

  Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3…

  Mar 19, 2010
• Unscored —
  CVE-2010-1011

  Cross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and earlier for TYPO3 allows…

  Mar 19, 2010
• Unscored —
  CVE-2010-1024

  SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to…

  Mar 19, 2010
• Unscored —
  CVE-2010-1025

  Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote…

  Mar 19, 2010
• Unscored —
  CVE-2010-1009

  SQL injection vulnerability in the Educator extension 0.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL …

  Mar 19, 2010