Archive
July 2010
Vulnerabilities first published in this month (UTC), newest first.
343 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platfo…
-
Unscored —
Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a pro…
-
Unscored —
Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."
-
Unscored —
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via certain HTML content tha…
-
Unscored —
The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers t…
-
Unscored —
freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands vi…
-
Unscored —
Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication …
-
Unscored —
SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x befor…
-
Unscored —
The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rend…
-
Medium —
HTML Purifier Cross-site Scripting (XSS) vulnerability
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —
Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "anno…
-
Unscored —
Unspecified vulnerability in Google Chrome before 5.0.375.99, when WebGL is used, allows remote attackers to cause a de…
-
Unscored —
Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and r…
-
Unscored —
The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.9…
-
Unscored —
Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (appl…
-
Unscored —
Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly ha…
-
Unscored —
Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of …
-
Unscored —CVE-2010-2630 Public exploit
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that h…
-
Unscored —CVE-2010-2631 Public exploit
LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly h…
-
Unscored —
The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4…
-
Unscored —CVE-2010-1327 Public exploit
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject …
-
Unscored —
The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-*…
-
Unscored —
The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 wit…
-
Unscored —
The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before…
-
Unscored —
The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read…
-
Unscored —
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, wh…
-
Unscored —
GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination file…
-
Unscored —
The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries,…
-
Unscored —CVE-2010-2482 Public exploit
LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to…
-
Unscored —
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidde…
-
Unscored —
Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops kernel, allows guest users …
-
Unscored —CVE-2010-2623 Public exploit
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute…
-
Unscored —CVE-2010-2624 Public exploit
Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —CVE-2010-2622 Public exploit
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute…
-
Unscored —
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIS…
-
Unscored —
Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, a…