Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —
The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, an…
-
Unscored —CVE-2010-1216 Public exploit
PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_glo…
-
Unscored —
Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read…
-
Unscored —
Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is…
-
Unscored —CVE-2010-0519 Public exploit
Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or caus…
-
Unscored —
Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attacke…
-
Unscored —
Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to e…
-
Unscored —CVE-2010-1183 Public exploit
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink …
-
Unscored —CVE-2010-1174 Public exploit
Cisco TFTP Server 1.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) read (aka R…
-
Unscored —CVE-2010-1180 Public exploit
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2010-1177 Public exploit
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…
-
Unscored —
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified im…
-
Unscored —CVE-2010-1179 Public exploit
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2010-1176 Public exploit
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2009-4755 Public exploit
Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via…
-
Unscored —CVE-2009-4754 Public exploit
Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long s…
-
Unscored —CVE-2009-4758 Public exploit
Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2009-4753 Public exploit
Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attacke…
-
Unscored —CVE-2009-4759 Public exploit
Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2009-4756 Public exploit
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to exec…
-
Unscored —CVE-2009-4757 Public exploit
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (app…
-
Unscored —CVE-2009-4760 Public exploit
Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which al…
-
Unscored —CVE-2009-4761 Public exploit
Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long s…
-
Unscored —CVE-2010-1131 Public exploit
JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2010-1132 Public exploit
The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allo…
-
Unscored —CVE-2010-1130 Public exploit
session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) character…
-
Unscored —CVE-2010-1128 Public exploit
The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easi…
-
Unscored —CVE-2009-4742 Public exploit
Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (…
-
Unscored —CVE-2009-4752 Public exploit
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute…
-
Unscored —CVE-2009-4751 Public exploit
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-4747 Public exploit
PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.0…
-
Unscored —CVE-2009-4746 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject ar…
-
Unscored —CVE-2009-4748 Public exploit
SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows…
-
Unscored —CVE-2009-4750 Public exploit
PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2009-4739 Public exploit
PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2009-4749 Public exploit
Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-4743 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlie…
-
Unscored —CVE-2009-4745 Public exploit
Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbi…
-
Unscored —
The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial…
-
Unscored —
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird befo…