Archive
December 2010
Vulnerabilities first published in this month (UTC), newest first.
91 results · Clear filters · Feed
-
Unscored —CVE-2010-4633 Public exploit
SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2010-4636 Public exploit
SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary…
-
Unscored —CVE-2010-4631 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2010-4638 Public exploit
SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0…
-
Unscored —CVE-2010-4632 Public exploit
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-4635 Public exploit
SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execu…
-
Unscored —CVE-2010-4158 Public exploit
The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain me…
-
Unscored —CVE-2010-4276 Public exploit
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in Liv…
-
Unscored —
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to…
-
Unscored —CVE-2010-4507 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 …
-
Unscored —CVE-2010-4258 Public exploit
The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs v…
-
Unscored —CVE-2010-3850 Public exploit
The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_AD…
-
Unscored —CVE-2010-3849 Public exploit
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is co…
-
Unscored —CVE-2010-3848 Public exploit
Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.…
-
Unscored —CVE-2010-4614 Public exploit
SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2010-4609 Public exploit
SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-4613 Public exploit
Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary…
-
Unscored —CVE-2010-4619 Public exploit
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execu…
-
Unscored —CVE-2010-4615 Public exploit
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-4607 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote att…
-
Unscored —CVE-2010-4610 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2010-4608 Public exploit
Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) com…
-
Unscored —
Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers …
-
Unscored —CVE-2010-4612 Public exploit
Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote…
-
Unscored —CVE-2010-4611 Public exploit
Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (…
-
Unscored —CVE-2010-4604 Public exploit
Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in…
-
Unscored —
Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava Integra…
-
Unscored —
The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote …
-
Unscored —
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary …
-
Unscored —
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in…
-
Unscored —
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0…
-
Unscored —CVE-2010-4347 Public exploit
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which …
-
Unscored —CVE-2010-4111 Public exploit
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attac…
-
Unscored —
Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processo…
-
Unscored —
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in ms…
-
Unscored —CVE-2010-4332 Public exploit
Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative p…
-
Unscored —CVE-2010-4333 Public exploit
Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrati…
-
Unscored —CVE-2010-4275 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators t…
-
Unscored —
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753…
-
Unscored —
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Serie…