Skip to content
OpenAdvisories

Archive

7 September 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 726
  8. 815
  9. 927
  10. 1018
  11. 11 
  12. 12 
  13. 138
  14. 1410
  15. 1525
  16. 1624
  17. 1719
  18. 18 
  19. 19 
  20. 2019
  21. 2110
  22. 2216
  23. 2312
  24. 2423
  25. 25 
  26. 26 
  27. 27 
  28. 286
  29. 2914
  30. 309

26 results · Feed

  • Unscored —

    gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking t…

  • Unscored —

    Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and a…

  • Unscored —

    Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spo…

  • Unscored —

    BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on fiel…

  • Unscored —

    Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified eleme…

  • Unscored —

    The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of…

  • Unscored —

    The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows …

  • Unscored —

    The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspe…

  • Unscored —

    Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecifie…

  • Unscored —

    Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denia…

  • Unscored —

    Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed …

  • Unscored —

    The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) dat…

  • Unscored —

    The WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause a denial of service (…

  • Unscored —

    Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to caus…

  • Unscored —
    CVE-2010-3213 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows re…

  • Unscored —

    Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote at…

  • Unscored —

    Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome befo…

  • Unscored —

    WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk bef…

  • Unscored —
    CVE-2010-2739 Public exploit

    Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise S…

  • Unscored —

    Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code…

  • Unscored —

    gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking …

  • Unscored —

    Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make…

  • Unscored —

    fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a d…

  • Unscored —

    Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authenticat…