| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-1402 | 9.3 | Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors | 2018-10-10 19:57:00 | 2010-06-11 18:00:00 |
| CVE-2010-1904 | 6.8 | SQL injection vulnerability in EMC RSA Key Manager (RKM) C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data. | 2018-10-10 19:57:00 | 2010-06-07 17:12:00 |
| CVE-2010-1646 | 6.2 | The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last | 2018-10-10 19:57:00 | 2010-06-07 17:12:00 |
| CVE-2010-1513 | 6.8 | Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to | 2018-10-10 19:57:00 | 2010-05-26 19:30:00 |
| CVE-2010-1628 | 9.3 | Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpret | 2018-10-10 19:57:00 | 2010-05-19 22:30:00 |
| CVE-2010-1454 | 6.8 | com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) passw | 2018-10-10 19:57:00 | 2010-05-19 18:30:00 |
| CVE-2010-1512 | 4.3 | Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file. | 2018-10-10 19:57:00 | 2010-05-17 21:00:00 |
| CVE-2010-1511 | 6.4 | KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file. | 2018-10-10 19:57:00 | 2010-05-17 21:00:00 |
| CVE-2010-1510 | 5.0 | Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PSD image with RLE compression. | 2018-10-10 19:57:00 | 2010-05-14 19:30:00 |
| CVE-2010-1509 | 5.0 | IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file | 2018-10-10 19:57:00 | 2010-05-14 19:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: