Skip to content
OpenAdvisories

Archive

25 August 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 218
  3. 3 
  4. 417
  5. 510
  6. 618
  7. 7 
  8. 8 
  9. 920
  10. 10 
  11. 1146
  12. 12 
  13. 1314
  14. 14 
  15. 15 
  16. 1619
  17. 1717
  18. 18 
  19. 1924
  20. 2030
  21. 21 
  22. 22 
  23. 2311
  24. 2420
  25. 2531
  26. 2638
  27. 2718
  28. 28 
  29. 29 
  30. 3017
  31. 3112

31 results · Feed

  • Unscored —

    Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to…

  • Unscored —

    CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middl…

  • Unscored —

    libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 c…

  • Unscored —

    Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbit…

  • Unscored —

    The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleart…

  • Unscored —

    Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute ar…

  • Unscored —

    Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote att…

  • Unscored —

    simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer valu…

  • Unscored —

    Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify M…

  • Unscored —

    Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspe…

  • Unscored —

    Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vec…

  • Unscored —

    Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack ve…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Webform report module 5.x and 6.x for Drupal allows remote attackers to…

  • Unscored —
    CVE-2009-4991 Public exploit

    Cross-site scripting (XSS) vulnerability in users/resume_register.php in Omnistar Recruiting allows remote attackers to…

  • Unscored —
    CVE-2009-4983 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-4985 Public exploit

    SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute…

  • Unscored —
    CVE-2009-4989 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4984 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote…

  • Unscored —
    CVE-2009-4987 Public exploit

    admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain a…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack t…

  • Unscored —
    CVE-2009-4977 Public exploit

    PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2009-4988 Public exploit EPSS 66%

    Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote att…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inj…

  • Unscored —

    Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to ex…

  • Unscored —
    CVE-2009-4993 Public exploit

    PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-4992 Public exploit

    SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-4978 Public exploit

    Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2009-4986 Public exploit

    Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote att…

  • Unscored —
    CVE-2009-4982 Public exploit

    SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote …