| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-2506 | 2.9 | Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter. | 2018-10-10 19:59:00 | 2010-06-28 18:30:00 |
| CVE-2010-2437 | 4.3 | Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the comment variable to modules/blog/index.php. | 2018-10-10 19:59:00 | 2010-06-24 17:30:00 |
| CVE-2010-2436 | 7.5 | SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO. | 2018-10-10 19:59:00 | 2010-06-24 17:30:00 |
| CVE-2010-2435 | 5.0 | Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers. | 2018-10-10 19:59:00 | 2010-06-24 17:30:00 |
| CVE-2010-2426 | 4.0 | Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc com | 2018-10-10 19:59:00 | 2010-06-24 12:17:00 |
| CVE-2010-2425 | 6.5 | Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command. | 2018-10-10 19:59:00 | 2010-06-24 12:17:00 |
| CVE-2010-2347 | 4.9 | The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors. | 2018-10-10 19:59:00 | 2010-06-21 19:30:00 |
| CVE-2010-2308 | 7.2 | Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function. | 2018-10-10 19:59:00 | 2010-06-16 20:30:00 |
| CVE-2010-2306 | 4.3 | The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middl | 2018-10-10 19:59:00 | 2010-06-16 20:30:00 |
| CVE-2010-2294 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors. | 2018-10-10 19:59:00 | 2010-06-15 14:04:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: