26 November 2010

23 results · Feed

• Unscored —
  CVE-2008-7266

  Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and …

  Nov 26, 2010
• Unscored —
  CVE-2010-4311

  Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive in…

  Nov 26, 2010
• Unscored —
  CVE-2010-4298 Public exploit

  SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbit…

  Nov 26, 2010
• Medium —
  CVE-2010-4312

  Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header

  The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.

  org.apache.tomcat:tomcat Maven
  Nov 26, 2010
• Medium —
  CVE-2010-4172 Public exploit EPSS 42%

  Improper Neutralization of Input During Web Page Generation in Apache Tomcat

  Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsLi…

  org.apache.tomcat:tomcat Maven
  Nov 26, 2010
• Unscored —
  CVE-2010-3814

  Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers …

  freetype Debian
  Nov 26, 2010
• Unscored —
  CVE-2010-3828

  iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad.

  Nov 26, 2010
• Unscored —
  CVE-2010-3827

  Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configurati…

  Nov 26, 2010
• Unscored —
  CVE-2010-3855

  Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remo…

  freetype Debian
  Nov 26, 2010
• Unscored —
  CVE-2010-3831

  Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allo…

  Nov 26, 2010
• Unscored —
  CVE-2010-3911

  Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitra…

  Nov 26, 2010
• Unscored —
  CVE-2010-3832

  Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iP…

  Nov 26, 2010
• Unscored —
  CVE-2010-3910

  Multiple directory traversal vulnerabilities in the return_application_language function in include/utils/utils.php in …

  Nov 26, 2010
• Unscored —
  CVE-2010-3705

  The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate th…

  Nov 26, 2010
• Unscored —
  CVE-2010-3829

  WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML L…

  qtwebkit-source Ubuntu
  Nov 26, 2010
• Unscored —
  CVE-2010-3830 Public exploit

  Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allo…

  Nov 26, 2010
• Unscored —
  CVE-2010-3909

  Incomplete blacklist vulnerability in config.template.php in vtiger CRM before 5.2.1 allows remote authenticated users …

  Nov 26, 2010
• Unscored —
  CVE-2010-4301 Public exploit

  epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers …

  Nov 26, 2010
• Unscored —
  CVE-2010-4300 Public exploit EPSS 14%

  Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector …

  wireshark Debian
  Nov 26, 2010
• Unscored —
  CVE-2010-3698

  The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, whic…

  Nov 26, 2010
• Unscored —
  CVE-2010-3445

  Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissecto…

  wireshark Debian
  Nov 26, 2010
• Unscored —
  CVE-2010-2962

  drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Renderin…

  Nov 26, 2010
• Unscored —
  CVE-2010-2963 Public exploit

  drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on …

  Nov 26, 2010