| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-1163 | 6.9 | The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows loca | 2018-10-10 19:55:00 | 2010-04-16 19:30:00 |
| CVE-2010-0994 | 6.8 | Multiple buffer overflows in src/vl/vlDAT.cpp in Visualization Library 2009.08.812 allow user-assisted remote attackers to execute arbitrary code via a crafted DAT file, related to the (1) vl::loadDAT and (2) vl::isDAT functions. | 2018-10-10 19:55:00 | 2010-04-15 20:30:00 |
| CVE-2010-0993 | 6.0 | Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a dire | 2018-10-10 19:55:00 | 2010-04-09 17:30:00 |
| CVE-2010-0992 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete imag | 2018-10-10 19:55:00 | 2010-04-09 17:30:00 |
| CVE-2010-1083 | 4.7 | The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for | 2018-10-10 19:55:00 | 2010-04-06 22:30:00 |
| CVE-2010-0850 | 7.5 | Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. | 2018-10-10 19:55:00 | 2010-04-01 16:30:00 |
| CVE-2010-1126 | 5.8 | The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method. | 2018-10-10 19:55:00 | 2010-03-26 20:30:00 |
| CVE-2010-1125 | 5.8 | The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visi | 2018-10-10 19:55:00 | 2010-03-26 20:30:00 |
| CVE-2010-1123 | 2.1 | Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local users to cause a denial of service (blockage of incoming e-mail) by creating lockfiles for arbitrary mailboxes. | 2018-10-10 19:55:00 | 2010-03-26 18:30:00 |
| CVE-2010-0989 | 5.5 | Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter. | 2018-10-10 19:55:00 | 2010-03-26 18:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: