7 June 2010

23 results · Feed

• Unscored —
  CVE-2010-1648

  Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before …

  mediawiki Debian
  Jun 7, 2010
• Medium —
  CVE-2010-1649

  Joomla! vulnerable to Cross-site Scripting

  Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in ad…

  joomla/joomla-cms Packagist
  Jun 7, 2010
• Unscored —
  CVE-2010-1636 Public exploit

  The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32…

  Jun 7, 2010
• Unscored —
  CVE-2010-1849

  The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attack…

  Jun 7, 2010
• Unscored —
  CVE-2010-1647

  Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote atta…

  mediawiki Debian
  Jun 7, 2010
• Unscored —
  CVE-2010-1848

  Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users t…

  Jun 7, 2010
• Unscored —
  CVE-2010-1850 EPSS 22%

  Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrar…

  Jun 7, 2010
• Unscored —
  CVE-2010-2159 Public exploit

  Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute a…

  Jun 7, 2010
• Unscored —
  CVE-2010-2060

  The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk co…

  beanstalkd Debian
  Jun 7, 2010
• Unscored —
  CVE-2010-2190

  The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 al…

  Jun 7, 2010
• Unscored —
  CVE-2010-2191

  The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) …

  Jun 7, 2010
• Unscored —
  CVE-2010-1904

  SQL injection vulnerability in EMC RSA Key Manager (RKM) C Client 1.5.x allows user-assisted remote attackers to execut…

  Jun 7, 2010
• Unscored —
  CVE-2010-1439

  yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora u…

  Jun 7, 2010
• Unscored —
  CVE-2010-1963

  Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or …

  Jun 7, 2010
• Unscored —
  CVE-2010-1962 EPSS 12%

  Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute …

  Jun 7, 2010
• Unscored —
  CVE-2010-1646

  The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an e…

  sudo Debian
  Jun 7, 2010
• Unscored —
  CVE-2010-2023

  transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify t…

  exim4 Debian
  Jun 7, 2010
• Unscored —
  CVE-2010-2158

  Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow re…

  Jun 7, 2010
• Unscored —
  CVE-2010-2157

  Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to ob…

  Jun 7, 2010
• Unscored —
  CVE-2010-2024

  transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of a…

  exim4 Debian
  Jun 7, 2010
• Unscored —
  CVE-2010-2053

  emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink atta…

  Jun 7, 2010
• Unscored —
  CVE-2010-2156 Public exploit EPSS 76%

  ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)…

  isc-dhcp Debian
  Jun 7, 2010
• Unscored —
  CVE-2010-2058

  setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain …

  prewikka Debian
  Jun 7, 2010