Archive
June 2010
Vulnerabilities first published in this month (UTC), newest first.
490 results · Feed
-
Unscored —CVE-2009-4907 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication…
-
Unscored —CVE-2009-4905 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2009-4906 Public exploit
Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the…
-
Unscored —
article.php in oBlog does not properly restrict comments, which allows remote attackers to cause a denial of service (b…
-
Unscored —
admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.
-
Unscored —
Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to exe…
-
Unscored —
parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 be…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 be…
-
Unscored —
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFR…
-
Unscored —CVE-2010-2437 Public exploit
Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote…
-
Unscored —CVE-2010-2435 Public exploit
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characte…
-
Unscored —CVE-2010-2438 Public exploit
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang p…
-
Unscored —CVE-2010-2440 Public exploit
Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers t…
-
Unscored —CVE-2010-2439 Public exploit
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list…
-
Unscored —
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) b…
-
Unscored —
The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not proper…
-
Unscored —
The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2010-2436 Public exploit
SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers t…
-
Unscored —CVE-2010-2442 EPSS 12%
Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to rea…
-
Unscored —CVE-2010-2433 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow…
-
Unscored —
Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and Sea…
-
Unscored —
Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situat…
-
Unscored —
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attack…
-
Unscored —
Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3…
-
Unscored —
The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.…
-
Unscored —
Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitra…
-
Unscored —
Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x…
-
Unscored —
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and S…
-
Unscored —
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote at…
-
Unscored —
Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows re…
-
Unscored —
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin_loginok.html in the Administrator web interface in Wing FTP Server fo…
-
Unscored —
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably ear…
-
Unscored —
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably ear…