18 January 2011

19 results · Feed

• Unscored —
  CVE-2006-7243

  PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intend…

  Jan 18, 2011
• Unscored —
  CVE-2010-4699

  The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings th…

  Jan 18, 2011
• Unscored —
  CVE-2010-4698

  Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent at…

  Jan 18, 2011
• Unscored —
  CVE-2010-4700

  The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly inte…

  Jan 18, 2011
• Unscored —
  CVE-2010-4697

  Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-depende…

  Jan 18, 2011
• Unscored —
  CVE-2011-0272 EPSS 13%

  Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic t…

  Jan 18, 2011
• Unscored —
  CVE-2011-0488

  Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advan…

  Jan 18, 2011
• Unscored —
  CVE-2011-0489 Public exploit EPSS 13%

  The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows re…

  Jan 18, 2011
• Unscored —
  CVE-2011-0486

  Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allo…

  Jan 18, 2011
• Unscored —
  CVE-2011-0408

  pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or pos…

  Jan 18, 2011
• Unscored —
  CVE-2011-0487

  ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code v…

  Jan 18, 2011
• Unscored —
  CVE-2011-0010

  check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command executi…

  sudo Debian
  Jan 18, 2011
• Unscored —
  CVE-2010-4646

  Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web scri…

  Jan 18, 2011
• Unscored —
  CVE-2010-4263

  The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Lin…

  Jan 18, 2011
• Unscored —
  CVE-2010-4530

  Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcs…

  ccid Debian
  Jan 18, 2011
• Unscored —
  CVE-2010-4531

  Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd …

  pcsc-lite Debian
  Jan 18, 2011
• Unscored —
  CVE-2010-4696

  Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL c…

  Jan 18, 2011
• Unscored —
  CVE-2010-4166

  Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL c…

  Jan 18, 2011
• Unscored —
  CVE-2009-5051

  Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier f…

  Jan 18, 2011