9 December 2010

20 results · Feed

• Unscored —
  CVE-2010-4513 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to…

  Dec 9, 2010
• Unscored —
  CVE-2010-4515

  Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5.0, 5.1, and 5.3 allows remote attackers to inject ar…

  Dec 9, 2010
• Unscored —
  CVE-2010-4516

  Multiple cross-site scripting (XSS) vulnerabilities in the JXtended Comments component before 1.3.1 for Joomla allow re…

  Dec 9, 2010
• Unscored —
  CVE-2010-4518 Public exploit

  Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for Word…

  Dec 9, 2010
• Unscored —
  CVE-2010-4514 Public exploit

  Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote …

  Dec 9, 2010
• Unscored —
  CVE-2010-4517 Public exploit

  SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is…

  Dec 9, 2010
• Unscored —
  CVE-2010-0530

  Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user…

  Dec 9, 2010
• Unscored —
  CVE-2010-1508

  Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code…

  Dec 9, 2010
• Unscored —
  CVE-2010-4009

  Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of…

  Dec 9, 2010
• Unscored —
  CVE-2010-4511

  Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors rel…

  Dec 9, 2010
• Unscored —
  CVE-2010-4509

  Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack…

  Dec 9, 2010
• Unscored —
  CVE-2010-4508

  The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiati…

  Dec 9, 2010
• Unscored —
  CVE-2010-4512

  Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveragin…

  Dec 9, 2010
• Unscored —
  CVE-2010-3801

  Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  Dec 9, 2010
• Unscored —
  CVE-2010-3800

  Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  Dec 9, 2010
• Unscored —
  CVE-2010-3802

  Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a d…

  Dec 9, 2010
• Unscored —
  CVE-2010-3921

  Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to…

  Dec 9, 2010
• Unscored —
  CVE-2010-3922

  SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbi…

  Dec 9, 2010
• High —
  CVE-2010-2235

  Cobbler is vulnerable to code injection

  template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated adminis…

  cobbler PyPI
  Dec 9, 2010
• Unscored —
  CVE-2009-5021

  Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easie…

  Dec 9, 2010