| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-0152 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML | 2018-10-10 19:51:00 | 2010-09-14 17:00:00 |
| CVE-2010-0212 | 5.0 | OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5St | 2018-10-10 19:51:00 | 2010-07-28 12:48:00 |
| CVE-2010-0132 | 2.6 | Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re i | 2018-10-10 19:51:00 | 2010-03-31 18:00:00 |
| CVE-2010-0164 | 9.3 | Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application cras | 2018-10-10 19:51:00 | 2010-03-25 21:00:00 |
| CVE-2010-0124 | 2.1 | Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process. | 2018-10-10 19:51:00 | 2010-03-15 13:28:00 |
| CVE-2010-0123 | 5.0 | The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable | 2018-10-10 19:51:00 | 2010-03-15 13:28:00 |
| CVE-2010-0122 | 7.5 | Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php. | 2018-10-10 19:51:00 | 2010-03-15 13:28:00 |
| CVE-2010-0119 | 2.1 | Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing." | 2018-10-10 19:51:00 | 2010-02-25 00:30:00 |
| CVE-2010-0118 | 3.3 | Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check. | 2018-10-10 19:51:00 | 2010-02-25 00:30:00 |
| CVE-2010-0107 | 9.3 | Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows r | 2018-10-10 19:51:00 | 2010-02-23 20:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: