16 August 2010

19 results · Feed

• Unscored —
  CVE-2010-3022

  Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6…

  Aug 16, 2010
• Unscored —
  CVE-2010-3023 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers …

  Aug 16, 2010
• Unscored —
  CVE-2010-3029 Public exploit

  SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands …

  Aug 16, 2010
• Unscored —
  CVE-2010-3024 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly …

  Aug 16, 2010
• Unscored —
  CVE-2010-3027 Public exploit

  SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary S…

  Aug 16, 2010
• Unscored —
  CVE-2010-3025

  Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote…

  Aug 16, 2010
• Unscored —
  CVE-2010-3028

  The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allow…

  Aug 16, 2010
• Unscored —
  CVE-2010-3026 Public exploit

  Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open…

  Aug 16, 2010
• Medium —
  CVE-2009-4269

  Use of Password Hash With Insufficient Computational Effort in Apache Derby

  The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for loc…

  org.apache.derby:derby sun-javadb Ubuntu Maven
  Aug 16, 2010
• Unscored —
  CVE-2010-1797 Public exploit EPSS 34%

  Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interp…

  freetype Debian
  Aug 16, 2010
• Unscored —
  CVE-2010-1799 Public exploit EPSS 34%

  Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote…

  Aug 16, 2010
• Unscored —
  CVE-2010-1886

  Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, a…

  Aug 16, 2010
• Unscored —
  CVE-2010-3021

  Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption a…

  Aug 16, 2010
• Unscored —
  CVE-2010-3020

  The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to …

  Aug 16, 2010
• Unscored —
  CVE-2010-3019

  Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of…

  Aug 16, 2010
• Unscored —
  CVE-2010-2827

  Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoof…

  Aug 16, 2010
• Unscored —
  CVE-2010-2576

  Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change,…

  Aug 16, 2010
• Unscored —
  CVE-2010-3013

  SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL co…

  Aug 16, 2010
• Unscored —
  CVE-2010-2577

  Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands v…

  Aug 16, 2010