Archive
September 2010
Vulnerabilities first published in this month (UTC), newest first.
297 results · Feed
-
Unscored —CVE-2010-3456 Public exploit
Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to …
-
Unscored —CVE-2010-3462 Public exploit
Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly…
-
Unscored —CVE-2010-3458 Public exploit
SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attac…
-
Unscored —
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint S…
-
Unscored —
SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted …
-
Unscored —CVE-2010-3073 Public exploit
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for…
-
Unscored —
EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which …
-
Unscored —
CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitr…
-
Unscored —
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Products_Results.php in PowerStore 3.0 allows remote attackers to inject ar…
-
Unscored —CVE-2010-3422 Public exploit
SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2010-3419 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote att…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitr…
-
Unscored —CVE-2010-3425 Public exploit
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board (I…
-
Unscored —
SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execu…
-
Unscored —CVE-2010-3428 Public exploit
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers t…
-
Unscored —
Google Chrome before 6.0.472.59 on Mac OS X does not properly implement file dialogs, which allows attackers to cause a…
-
Unscored —
Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier a…
-
Unscored —
Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to…
-
Unscored —
Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denia…
-
Unscored —
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server …
-
Unscored —
Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vecto…
-
Unscored —
Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows …
-
Unscored —
Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denia…
-
Unscored —
Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system gr…
-
Unscored —
Unspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59 allows remote attacke…
-
Unscored —
Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19 allows local users, and p…
-
Unscored —CVE-2010-3404 Public exploit
Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL…
-
Unscored —
Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other …
-
Unscored —
The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6…
-
Unscored —
Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware b…
-
Unscored —CVE-2010-3171 Public exploit
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to…
-
Unscored —
Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown…
-
Unscored —
The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6…
-
Unscored —CVE-2010-0818 EPSS 14%
The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, a…
-
High 8.8CVE-2010-0820 EPSS 14%
Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Mi…