Archive
26 November 2010
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Unscored —CVE-2010-4298 Public exploit
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbit…
-
Medium —
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsLi…
-
Unscored —CVE-2010-3830 Public exploit
Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allo…
-
Unscored —CVE-2010-4301 Public exploit
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers …
-
Unscored —
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector …
-
Unscored —CVE-2010-2963 Public exploit
drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on …