20 April 2010

27 results · Feed

• Unscored —
  CVE-2010-0886 Public exploit EPSS 70%

  Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE …

  Apr 20, 2010
• Unscored —
  CVE-2010-0887

  Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Updat…

  Apr 20, 2010
• High —
  CVE-2010-1153

  TYPO3 PHP remote file inclusion vulnerability

  PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

  typo3/cms Packagist
  Apr 20, 2010
• Unscored —
  CVE-2008-7255

  login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically …

  Apr 20, 2010
• Unscored —
  CVE-2010-0996

  Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary cod…

  Apr 20, 2010
• Unscored —
  CVE-2010-0997

  Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in…

  Apr 20, 2010
• Unscored —
  CVE-2010-1458 Public exploit

  Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remo…

  Apr 20, 2010
• Unscored —
  CVE-2010-1151

  Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authenticatio…

  Apr 20, 2010
• Unscored —
  CVE-2010-1489 EPSS 15%

  The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows re…

  Apr 20, 2010
• Unscored —
  CVE-2010-0744

  aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a …

  Apr 20, 2010
• Unscored —
  CVE-2010-1165

  Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (…

  Apr 20, 2010
• Unscored —
  CVE-2010-1487

  IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local use…

  Apr 20, 2010
• Unscored —
  CVE-2010-1164

  Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject…

  Apr 20, 2010
• Unscored —
  CVE-2010-1150

  MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintende…

  mediawiki Debian
  Apr 20, 2010
• Unscored —
  CVE-2010-1488

  The proc_oom_score function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures …

  Apr 20, 2010
• Unscored —
  CVE-2010-1319

  Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and He…

  Apr 20, 2010
• Unscored —
  CVE-2010-1162

  The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required call…

  Apr 20, 2010
• Unscored —
  CVE-2010-1318 Public exploit EPSS 58%

  Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Se…

  Apr 20, 2010
• Unscored —
  CVE-2010-1317

  Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Serve…

  Apr 20, 2010
• Unscored —
  CVE-2010-1158

  Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of…

  Apr 20, 2010
• Unscored —
  CVE-2009-4771

  The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for…

  Apr 20, 2010
• Unscored —
  CVE-2009-4770

  The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderat…

  Apr 20, 2010
• Unscored —
  CVE-2009-4769 Public exploit EPSS 38%

  Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) rem…

  Apr 20, 2010
• Unscored —
  CVE-2009-4767 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to injec…

  Apr 20, 2010
• Unscored —
  CVE-2009-4768

  Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows us…

  Apr 20, 2010
• Unscored —
  CVE-2009-4772

  Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1…

  Apr 20, 2010
• Unscored —
  CVE-2009-4773

  Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x before…

  Apr 20, 2010