Archive
November 2010
Vulnerabilities first published in this month (UTC), newest first.
278 results · Feed
-
Unscored —
The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not pro…
-
Unscored —
The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initiali…
-
Unscored —
The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure,…
-
Unscored —
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Securit…
-
Unscored —
The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize…
-
Unscored —
Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users …
-
Unscored —CVE-2010-3858 Public exploit
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does …
-
Unscored —CVE-2010-4249 Public exploit
The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not proper…
-
Unscored —
The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize…
-
Unscored —CVE-2010-4077 Public exploit
The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly…
-
Unscored —
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which a…
-
Unscored —
The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initia…
-
Unscored —
The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly …
-
Unscored —CVE-2010-4073 Public exploit
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local user…
-
Unscored —
The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly ini…
-
Unscored —
The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain struct…
-
Unscored —
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and …
-
Unscored —
Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive in…
-
Unscored —CVE-2010-4298 Public exploit
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbit…
-
Medium —
Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header
The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
-
Medium —
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsLi…
-
Unscored —
Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers …
-
Unscored —
iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad.
-
Unscored —
Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configurati…
-
Unscored —
Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remo…
-
Unscored —
Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitra…
-
Unscored —
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iP…
-
Unscored —
Multiple directory traversal vulnerabilities in the return_application_language function in include/utils/utils.php in …
-
Unscored —
The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate th…
-
Unscored —
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML L…
-
Unscored —CVE-2010-3830 Public exploit
Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allo…
-
Unscored —
Incomplete blacklist vulnerability in config.template.php in vtiger CRM before 5.2.1 allows remote authenticated users …
-
Unscored —CVE-2010-4301 Public exploit
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers …
-
Unscored —
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector …
-
Unscored —
The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, whic…
-
Unscored —
Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissecto…
-
Unscored —
drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Renderin…
-
Unscored —CVE-2010-2963 Public exploit
drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on …
-
Unscored —
Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate In…