Archive
December 2010
Vulnerabilities first published in this month (UTC), newest first.
359 results · Feed
-
Unscored —
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveragin…
-
Unscored —
Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to…
-
Unscored —
SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbi…
-
High —
Cobbler is vulnerable to code injection
template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated adminis…
-
Unscored —
Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easie…
-
Unscored —
Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic_quotes_gpc is disabled, allow remote a…
-
Unscored —CVE-2010-4502 Public exploit
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitra…
-
Unscored —CVE-2010-4503 Public exploit
SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the…
-
Unscored —
The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which preven…
-
Unscored —
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensit…
-
Unscored —
The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attacker…
-
Unscored —
HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated …
-
Unscored —
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to g…
-
Unscored —
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHE…
-
Unscored —
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disa…
-
Unscored —CVE-2010-4480 Public exploit
error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site s…
-
Unscored —CVE-2010-4170 Public exploit
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allo…
-
Unscored —
Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.…
-
Unscored —
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor sho…
-
Unscored —
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty …
-
Unscored —
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, w…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service v…
-
Unscored —
Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cau…
-
Unscored —
Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which a…
-
Unscored —
Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of …
-
Unscored —
Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to…
-
Unscored —
Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attacke…
-
Unscored —
libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a den…
-
Unscored —
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other pr…
-
Unscored —
Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly h…
-
Unscored —
Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to c…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service o…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service o…
-
Unscored —
Unspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass the pop-up blocker via …