Archive
December 2010
Vulnerabilities first published in this month (UTC), newest first.
359 results · Feed
-
Unscored —CVE-2010-4313 Public exploit
Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users …
-
Unscored —
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which a…
-
Unscored —CVE-2010-4280 Public exploit
Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrar…
-
Unscored —
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute …
-
Unscored —
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary com…
-
Unscored —CVE-2010-4283 Public exploit
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers …
-
Unscored —
MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, whi…
-
Unscored —
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the ac…
-
Unscored —
The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a M…
-
Unscored —
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a cra…
-
Unscored —
MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote au…
-
Unscored —
Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code …
-
Unscored —CVE-2010-4371 Public exploit
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (…
-
Unscored —
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute ar…
-
Unscored —
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to…
-
Unscored —
Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via ve…
-
Unscored —
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credential…
-
Unscored —
The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via cra…
-
Unscored —CVE-2010-3267 Public exploit
Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbit…
-
Unscored —CVE-2010-3266 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to …
-
Unscored —
Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute ar…
-
Unscored —CVE-2009-5020 Scanner template
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary…
-
Unscored —CVE-2008-7267 Public exploit
SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arb…
-
Unscored —
The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action param…
-
Unscored —CVE-2010-4365 Public exploit
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote att…
-
Unscored —
DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows re…
-
Unscored —CVE-2010-4360 Public exploit
Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2010-4356 Public exploit
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitr…
-
Unscored —CVE-2010-4357 Public exploit
SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-4359 Public exploit
SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disa…
-
Unscored —CVE-2010-4362 Public exploit
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQ…
-
Unscored —
Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allow…
-
Unscored —CVE-2010-4366 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to…
-
Unscored —CVE-2009-5019 Public exploit
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote a…