Archive
December 2010
Vulnerabilities first published in this month (UTC), newest first.
359 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows r…
-
Unscored —
Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local…
-
Unscored —
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functional…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobil…
-
Unscored —
Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code v…
-
Unscored —
The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB auth…
-
Unscored —
The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authenticatio…
-
Unscored —
Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processo…
-
Unscored —
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel…
-
Unscored —
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in ms…
-
Unscored —
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which…
-
Unscored —
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base S…
-
Unscored —
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, …
-
Unscored —
Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier f…
-
Unscored —
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issu…
-
Unscored —
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remo…
-
Unscored —CVE-2010-4332 Public exploit
Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative p…
-
Unscored —
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote at…
-
Unscored —
Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might …
-
Unscored —CVE-2010-4333 Public exploit
Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrati…
-
Unscored —CVE-2010-4275 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators t…
-
Unscored —
Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote at…
-
Unscored —
Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier fo…
-
Unscored —
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a den…
-
Unscored —
Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificate…
-
Unscored —
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753…
-
Unscored —
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station wit…
-
Unscored —
fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x be…
-
Unscored —
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a …
-
Unscored —CVE-2010-4116 EPSS 12%
Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execu…
-
Unscored —
The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 6…
-
Unscored —
The ThemeInstalledInfoBarDelegate::Observe function in browser/extensions/theme_installed_infobar_delegate.cc in Google…
-
Unscored —
Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows…
-
Unscored —
browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 doe…
-
High 7.5
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.55…
-
Unscored —
HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R…
-
Unscored —
Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.…
-
Unscored —
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Serie…