| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-0160 | 10.0 | The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap me | 2018-10-10 19:51:00 | 2010-02-22 13:00:00 |
| CVE-2010-0280 | 9.3 | Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, prob | 2018-10-10 19:51:00 | 2010-01-15 17:30:00 |
| CVE-2010-0278 | 4.3 | A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile metho | 2018-10-10 19:51:00 | 2010-01-12 17:30:00 |
| CVE-2010-0094 | 7.5 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the p | 2018-10-10 19:50:00 | 2010-04-01 16:30:00 |
| CVE-2010-0092 | 5.1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. | 2018-10-10 19:50:00 | 2010-04-01 16:30:00 |
| CVE-2010-0090 | 5.8 | Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors. | 2018-10-10 19:50:00 | 2010-04-01 16:30:00 |
| CVE-2009-5135 | 5.0 | The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) is | 2018-10-10 19:49:00 | 2013-05-02 11:44:00 |
| CVE-2009-5101 | 5.0 | Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic. | 2018-10-10 19:49:00 | 2011-09-13 19:59:00 |
| CVE-2009-5100 | 2.1 | Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password. | 2018-10-10 19:49:00 | 2011-09-13 19:59:00 |
| CVE-2009-5099 | 4.3 | Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter. | 2018-10-10 19:49:00 | 2011-09-13 19:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: