Archive
25 August 2010
Vulnerabilities first published on this day (UTC), newest first.
31 results · Feed
-
Unscored —
Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to…
-
Unscored —
CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middl…
-
Unscored —
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 c…
-
Unscored —
Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbit…
-
Unscored —
The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleart…
-
Unscored —
Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute ar…
-
Unscored —
Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote att…
-
Unscored —
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer valu…
-
Unscored —
Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify M…
-
Unscored —
Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspe…
-
Unscored —
Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vec…
-
Unscored —
Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack ve…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform report module 5.x and 6.x for Drupal allows remote attackers to…
-
Unscored —CVE-2009-4991 Public exploit
Cross-site scripting (XSS) vulnerability in users/resume_register.php in Omnistar Recruiting allows remote attackers to…
-
Unscored —CVE-2009-4983 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitra…
-
Unscored —CVE-2009-4985 Public exploit
SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute…
-
Unscored —CVE-2009-4989 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbi…
-
Unscored —CVE-2009-4984 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote…
-
Unscored —CVE-2009-4987 Public exploit
admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain a…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack t…
-
Unscored —CVE-2009-4977 Public exploit
PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arb…
-
Unscored —
Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote att…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inj…
-
Unscored —
Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to ex…
-
Unscored —CVE-2009-4993 Public exploit
PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2009-4992 Public exploit
SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-4978 Public exploit
Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2009-4986 Public exploit
Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2009-4982 Public exploit
SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote …