Archive
22 December 2010
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when H…
-
Unscored —CVE-2010-4347 Public exploit
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which …
-
Unscored —
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does n…
-
Unscored —
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, w…
-
Unscored —
HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified requ…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x all…
-
Unscored —
The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected secur…
-
Unscored —CVE-2010-4111 Public exploit
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows r…
-
Unscored —
Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local…
-
Unscored —
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functional…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobil…
-
Unscored —
Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code v…
-
Unscored —
The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB auth…
-
Unscored —
The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authenticatio…
-
Unscored —
Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processo…
-
Unscored —
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel…
-
Unscored —
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in ms…
-
Unscored —
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which…
-
Unscored —
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base S…
-
Unscored —
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, …
-
Unscored —
Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier f…
-
Unscored —
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issu…
-
Unscored —
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remo…
-
Unscored —CVE-2010-4332 Public exploit
Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative p…
-
Unscored —
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote at…
-
Unscored —
Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might …
-
Unscored —CVE-2010-4333 Public exploit
Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrati…
-
Unscored —CVE-2010-4275 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators t…
-
Unscored —
Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote at…
-
Unscored —
Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier fo…
-
Unscored —
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a den…
-
Unscored —
Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificate…
-
Unscored —
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753…
-
Unscored —
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station wit…
-
Unscored —
fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x be…
-
Unscored —
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a …
-
Unscored —CVE-2010-4116 EPSS 12%
Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execu…