Archive
August 2010
Vulnerabilities first published in this month (UTC), newest first.
380 results · Feed
-
Unscored —
Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows att…
-
Unscored —
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which mi…
-
Unscored —
The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node …
-
Unscored —
Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of …
-
Unscored —
Google Chrome before 5.0.375.127 does not properly implement the Geolocation feature, which allows remote attackers to …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow …
-
Unscored —
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remo…
-
Unscored —
Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google …
-
Unscored —
Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers t…
-
Unscored —
Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute …
-
Unscored —
The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x e…
-
Unscored —
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 a…
-
Unscored —
QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, d…
-
Unscored —
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 a…
-
Unscored —
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP conn…
-
Unscored —
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hy…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computi…
-
Unscored —
Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote aut…
-
Unscored —
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a…
-
Unscored —
The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a p…
-
Unscored —
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary …
-
Unscored —
Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execut…
-
Unscored —
A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly res…
-
Unscored —
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computi…
-
Unscored —CVE-2010-2543 Public exploit
Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers…
-
Unscored —CVE-2010-2544 Public exploit
Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance C…
-
Unscored —
Directory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote F…
-
Unscored —
Directory traversal vulnerability in DeskShare AutoFTP Manager 4.31, and probably earlier versions, allows remote FTP s…
-
Unscored —
Directory traversal vulnerability in SiteDesigner Technologies, Inc. 3D-FTP Client 9.0 build 2, and probably earlier ve…
-
Unscored —
Directory traversal vulnerability in FTPx Corp FTP Explorer 10.5.19.1 for Windows, and probably earlier versions, allow…
-
Unscored —
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certai…
-
Unscored —CVE-2010-2710 EPSS 10%
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…
-
Unscored —
The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memor…
-
Unscored —
Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related …
-
Unscored —
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local …
-
Unscored —
Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to o…
-
Unscored —
Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to over…
-
Unscored —
The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calcu…
-
Unscored —
mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive …