Archive
July 2010
Vulnerabilities first published in this month (UTC), newest first.
343 results · Feed
-
Unscored —
Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of ser…
-
Unscored —
layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plu…
-
Unscored —
dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.…
-
Unscored —
The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sen…
-
Unscored —
The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows re…
-
Unscored —CVE-2010-2909 Public exploit
SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attacke…
-
Unscored —CVE-2010-2910 Public exploit
SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to exec…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 …
-
Unscored —CVE-2010-2907 Public exploit
SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2010-2906 Public exploit
SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remo…
-
Unscored —CVE-2010-2905 Public exploit
SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attacker…
-
Unscored —CVE-2010-2908 Public exploit
SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla! allows remote attackers…
-
Unscored —CVE-2010-2912 Public exploit
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2010-2911 Public exploit
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2010-1452 EPSS 21%
The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause…
-
Unscored —
Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to o…
-
Unscored —
Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attac…
-
Unscored —
Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknow…
-
Unscored —
Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecifie…
-
Unscored —
IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPe…
-
Unscored —
The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (…
-
Unscored —
The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory…
-
Unscored —
Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown…
-
Unscored —
OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN d…
-
Unscored —
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNS…
-
Unscored —
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_norma…
-
Unscored —
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP Sto…
-
Unscored —
Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3…
-
Unscored —
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remo…
-
Unscored —
The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a p…
-
Unscored —
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote att…
-
Unscored —CVE-2010-2704 EPSS 15%
Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary…
-
Unscored —
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)…
-
Unscored —
Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbi…
-
Unscored —
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a…
-
Unscored —
SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitr…
-
Low —
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —
SQL injection vulnerability in the AIRware Lexicon (air_lexicon) extension 0.0.1 for TYPO3 allows remote attackers to e…
-
Unscored —CVE-2009-4974 Public exploit
Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary fil…
-
Unscored —CVE-2009-4973 Public exploit
SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands v…