Archive
14 September 2010
Vulnerabilities first published on this day (UTC), newest first.
10 results · Feed
-
Unscored —
Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through …
-
Medium 6.1
Cross-site scripting in django
Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.
-
Unscored —CVE-2010-2961 Public exploit
mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain pr…
-
Unscored —
Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia…
-
Unscored —
CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Secu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Networ…
-
Unscored —
Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network…
-
Unscored —
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session …
-
Unscored —
The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain…