| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-0705 | 7.2 | Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code | 2018-10-10 19:53:00 | 2010-02-25 18:30:00 |
| CVE-2010-0620 | 9.3 | Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. (dot dot) i | 2018-10-10 19:53:00 | 2010-02-25 00:30:00 |
| CVE-2010-0640 | 2.6 | Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request. | 2018-10-10 19:53:00 | 2010-02-24 18:30:00 |
| CVE-2010-0703 | 4.3 | Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML via the reloadFrame parameter. | 2018-10-10 19:53:00 | 2010-02-23 20:30:00 |
| CVE-2010-0685 | 5.0 | The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inje | 2018-10-10 19:53:00 | 2010-02-23 20:30:00 |
| CVE-2010-0671 | 7.5 | SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action. | 2018-10-10 19:53:00 | 2010-02-22 20:30:00 |
| CVE-2010-0556 | 4.3 | browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive inf | 2018-10-10 19:53:00 | 2010-02-18 17:30:00 |
| CVE-2010-0616 | 7.5 | evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability. | 2018-10-10 19:53:00 | 2010-02-11 17:30:00 |
| CVE-2010-0615 | 4.3 | Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the reports comment box in a continue_assess action. NOTE: some of these details are obtained from third par | 2018-10-10 19:53:00 | 2010-02-11 17:30:00 |
| CVE-2010-0614 | 7.5 | SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions. | 2018-10-10 19:53:00 | 2010-02-11 17:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: