Archive
September 2010
Vulnerabilities first published in this month (UTC), newest first.
297 results · Feed
-
Unscored —
Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary c…
-
Unscored —
The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, w…
-
Unscored —
Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unkn…
-
High 7.5
Zope Denial of Service (DoS) vulnerability in ZServer
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
-
Medium —
phpMyAdmin Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different…
-
Unscored —
The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a…
-
Unscored —
The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to over…
-
Unscored —
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel…
-
Unscored —
The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in …
-
Unscored —CVE-2010-2959 Public exploit
Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27…
-
Unscored —
The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does …
-
Unscored —
Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel…
-
Unscored —
The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 d…
-
Unscored —
The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPC…
-
Unscored —
Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local use…
-
Unscored —
gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking t…
-
Unscored —
Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and a…
-
Unscored —
Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spo…
-
Unscored —
BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on fiel…
-
Unscored —
Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified eleme…
-
Unscored —
The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of…
-
Unscored —
The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows …
-
Unscored —
The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspe…
-
Unscored —
Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecifie…
-
Unscored —
Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denia…
-
Unscored —
Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed …
-
Unscored —
The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) dat…
-
Unscored —
The WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause a denial of service (…
-
Unscored —
Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to caus…
-
Unscored —CVE-2010-3213 Public exploit
Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows re…
-
Unscored —
Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote at…
-
Unscored —
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome befo…
-
Unscored —
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk bef…
-
Unscored —CVE-2010-2739 Public exploit
Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise S…
-
Unscored —
Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code…
-
Unscored —
gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking …
-
Unscored —
Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make…
-
Unscored —
fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a d…
-
Unscored —
Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary…