Archive
6 July 2010
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication …
-
Unscored —
SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x befor…
-
Unscored —
The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rend…
-
Medium —
HTML Purifier Cross-site Scripting (XSS) vulnerability
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —
Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "anno…
-
Unscored —
Unspecified vulnerability in Google Chrome before 5.0.375.99, when WebGL is used, allows remote attackers to cause a de…
-
Unscored —
Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and r…
-
Unscored —
The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.9…
-
Unscored —
Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (appl…
-
Unscored —
Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly ha…
-
Unscored —
Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of …
-
Unscored —CVE-2010-2630 Public exploit
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that h…
-
Unscored —CVE-2010-2631 Public exploit
LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly h…
-
Unscored —
The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4…
-
Unscored —CVE-2010-1327 Public exploit
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject …
-
Unscored —
The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-*…
-
Unscored —
The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 wit…
-
Unscored —
The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before…
-
Unscored —
The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read…
-
Unscored —
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, wh…
-
Unscored —
GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination file…
-
Unscored —
The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries,…
-
Unscored —CVE-2010-2482 Public exploit
LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to…