26 March 2010

34 results · Feed

• Unscored —
  CVE-2010-1133

  Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbit…

  Mar 26, 2010
• Unscored —
  CVE-2010-1135

  The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which al…

  Mar 26, 2010
• Unscored —
  CVE-2010-1134

  SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remo…

  Mar 26, 2010
• Unscored —
  CVE-2010-1136

  The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrict…

  Mar 26, 2010
• Unscored —
  CVE-2010-1131 Public exploit

  JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of servi…

  Mar 26, 2010
• Unscored —
  CVE-2010-1132 Public exploit

  The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allo…

  spamass-milter Debian
  Mar 26, 2010
• Unscored —
  CVE-2010-1130 Public exploit

  session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) character…

  Mar 26, 2010
• Unscored —
  CVE-2010-1126

  The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden…

  Mar 26, 2010
• Unscored —
  CVE-2010-1125

  The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, …

  Mar 26, 2010
• Unscored —
  CVE-2010-1129

  The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (…

  Mar 26, 2010
• Unscored —
  CVE-2010-1127 EPSS 19%

  Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement m…

  Mar 26, 2010
• Unscored —
  CVE-2010-1128 Public exploit

  The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easi…

  Mar 26, 2010
• Unscored —
  CVE-2009-4742 Public exploit

  Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (…

  Mar 26, 2010
• Unscored —
  CVE-2009-4752 Public exploit

  PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute…

  Mar 26, 2010
• Unscored —
  CVE-2009-4751 Public exploit

  SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary S…

  Mar 26, 2010
• Unscored —
  CVE-2009-4747 Public exploit

  PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.0…

  Mar 26, 2010
• Unscored —
  CVE-2009-4744

  Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers …

  Mar 26, 2010
• Unscored —
  CVE-2009-4741

  Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact…

  Mar 26, 2010
• Unscored —
  CVE-2009-4740

  Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecifie…

  Mar 26, 2010
• Unscored —
  CVE-2009-4746 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject ar…

  Mar 26, 2010
• Unscored —
  CVE-2009-4748 Public exploit

  SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows…

  Mar 26, 2010
• Unscored —
  CVE-2009-4750 Public exploit

  PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP …

  Mar 26, 2010
• Unscored —
  CVE-2009-4739 Public exploit

  PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP…

  Mar 26, 2010
• Unscored —
  CVE-2009-4749 Public exploit

  Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL com…

  Mar 26, 2010
• Unscored —
  CVE-2009-4743 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlie…

  Mar 26, 2010
• Unscored —
  CVE-2009-4745 Public exploit

  Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbi…

  Mar 26, 2010
• Unscored —
  CVE-2010-0439

  Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly cha…

  Mar 26, 2010
• Unscored —
  CVE-2010-0740 Public exploit EPSS 20%

  The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial…

  openssl Debian
  Mar 26, 2010
• Unscored —
  CVE-2010-0731

  The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platform…

  Mar 26, 2010
• Unscored —
  CVE-2010-0988

  Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files a…

  Mar 26, 2010
• Unscored —
  CVE-2010-0989

  Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete a…

  Mar 26, 2010
• Unscored —
  CVE-2010-1124

  bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getadd…

  Mar 26, 2010
• Unscored —
  CVE-2010-1123

  Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local u…

  Mar 26, 2010
• Unscored —
  CVE-2009-4505

  Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inj…

  Mar 26, 2010