Archive
October 2010
Vulnerabilities first published in this month (UTC), newest first.
434 results · Feed
-
Unscored —
monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service …
-
Unscored —
share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulat…
-
Unscored —
Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Micros…
-
Unscored —
Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably othe…
-
Unscored —
openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symli…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used,…
-
Unscored —
The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remot…
-
Unscored —
The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Cont…
-
Unscored —
Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module Acti…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attacker…
-
Unscored —
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN ac…
-
Unscored —
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitra…
-
Unscored —
Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read a…
-
Unscored —
Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4…
-
Unscored —
Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00…
-
Unscored —
Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Inform…
-
Unscored —
Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Tro…
-
Unscored —
Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL…
-
Unscored —
Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain pri…
-
Unscored —
Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.1…
-
Unscored —
Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FI…
-
Unscored —
Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse…
-
Unscored —
Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users t…
-
Unscored —
Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan hors…
-
High —
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers …
-
Unscored —
The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not pr…
-
Unscored —
The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain…
-
Medium —
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote auth…
-
Unscored —
Untrusted search path vulnerability in Apsaly before 3.74 allows local users to gain privileges via a Trojan horse exec…
-
Unscored —CVE-2010-4056 Public exploit
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon rece…
-
Unscored —CVE-2010-4057 Public exploit
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon rece…
-
Unscored —
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer …
-
Unscored —
Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10…
-
Unscored —CVE-2010-4055 Public exploit
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a deni…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inje…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers …
-
Unscored —
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote authenticated users to gain priv…
-
Unscored —
Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified imp…
-
Unscored —
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, …