Archive
July 2010
Vulnerabilities first published in this month (UTC), newest first.
343 results · Feed
-
Unscored —
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allow…
-
Unscored —CVE-2010-2627 Public exploit
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) …
-
Medium 6.1
Cross-site Scripting in python-cjson
Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.
-
Medium —
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the c…
-
Unscored —CVE-2010-2549 Public exploit
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and…
-
Medium 6.1
Mako contains Cross-site Scripting vulnerability
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLo…
-
Unscored —CVE-2010-2613 Public exploit
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows rem…
-
Unscored —
SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to ex…
-
Unscored —CVE-2010-2615 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow…
-
Unscored —CVE-2010-2618 Public exploit
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is en…
-
Unscored —CVE-2010-2611 Public exploit
SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to exe…
-
Unscored —
Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Inte…
-
Unscored —CVE-2010-2616 Public exploit
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-2610 Public exploit
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2010-2617 Public exploit
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2010-2609 Public exploit
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to ex…
-
Unscored —
Multiple SQL injection vulnerabilities in the BookLibrary Basic (com_booklibrary) component 1.5.3 before 1.5.3_2010_06_…
-
Unscored —
tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertic…
-
Unscored —
LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data …
-
Unscored —
The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid Refere…
-
Unscored —
The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField functio…
-
Unscored —
The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare …