31 March 2010

28 results · Feed

• Unscored —
  CVE-2010-0807 EPSS 29%

  Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  Mar 31, 2010
• Medium 6.5
  CVE-2010-0488 EPSS 29%

  Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which al…

  Mar 31, 2010
• Unscored —
  CVE-2010-0805 Public exploit EPSS 81%

  The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, an…

  Mar 31, 2010
• Unscored —
  CVE-2010-0489 EPSS 24%

  Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary co…

  Mar 31, 2010
• High 8.1
  CVE-2010-0492 EPSS 28%

  Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrar…

  Mar 31, 2010
• Unscored —
  CVE-2010-0490 EPSS 29%

  Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  Mar 31, 2010
• Unscored —
  CVE-2010-0494 EPSS 23%

  Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to b…

  Mar 31, 2010
• Unscored —
  CVE-2010-0491 EPSS 29%

  Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute a…

  Mar 31, 2010
• Unscored —
  CVE-2010-0267 EPSS 34%

  Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers t…

  Mar 31, 2010
• Unscored —
  CVE-2010-0529 EPSS 12%

  Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execu…

  Mar 31, 2010
• Unscored —
  CVE-2010-0536

  Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service …

  Mar 31, 2010
• Unscored —
  CVE-2010-0532

  Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges …

  Mar 31, 2010
• Unscored —
  CVE-2010-0527

  Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause …

  Mar 31, 2010
• Unscored —
  CVE-2010-0531

  Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast …

  Mar 31, 2010
• Unscored —
  CVE-2010-0528

  Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service …

  Mar 31, 2010
• Unscored —
  CVE-2010-0448

  Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized a…

  Mar 31, 2010
• Unscored —
  CVE-2010-0450

  Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privile…

  Mar 31, 2010
• Unscored —
  CVE-2010-0449

  Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject …

  Mar 31, 2010
• Unscored —
  CVE-2010-0132

  Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression …

  Mar 31, 2010
• Unscored —
  CVE-2010-1030

  Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of servi…

  Mar 31, 2010
• Unscored —
  CVE-2010-1187

  The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibl…

  Mar 31, 2010
• Unscored —
  CVE-2010-1189

  MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which …

  mediawiki Debian
  Mar 31, 2010
• Unscored —
  CVE-2010-1194

  The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats tw…

  libesmtp Debian
  Mar 31, 2010
• Unscored —
  CVE-2010-1195

  Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20…

  ikiwiki Debian
  Mar 31, 2010
• Unscored —
  CVE-2010-1190

  thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check…

  mediawiki Debian
  Mar 31, 2010
• Unscored —
  CVE-2010-1192

  libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subject's Commo…

  libesmtp Debian
  Mar 31, 2010
• Unscored —
  CVE-2010-1188

  Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is se…

  Mar 31, 2010
• Unscored —
  CVE-2010-1191

  Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended acce…

  Mar 31, 2010