Archive
29 December 2010
Vulnerabilities first published on this day (UTC), newest first.
24 results · Feed
-
Unscored —CVE-2010-4614 Public exploit
SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2010-4609 Public exploit
SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-4613 Public exploit
Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary…
-
Unscored —CVE-2010-4619 Public exploit
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execu…
-
Unscored —CVE-2010-4615 Public exploit
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL comman…
-
Medium —
ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter
Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.
-
Unscored —CVE-2010-4607 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote att…
-
Unscored —CVE-2010-4610 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2010-4608 Public exploit
Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) com…
-
Unscored —
Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers …
-
Unscored —CVE-2010-4612 Public exploit
Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows rem…
-
Unscored —CVE-2010-4611 Public exploit
Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (…
-
Unscored —
The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated…
-
Unscored —
Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM …
-
Unscored —
Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, a…
-
Unscored —CVE-2010-4604 Public exploit
Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in…
-
Unscored —
The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementati…
-
Unscored —
Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.…
-
Unscored —
drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which …
-
Unscored —
IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modi…
-
Unscored —
Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x…
-
Unscored —
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to …
-
Unscored —
Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller A…