| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-0059 | 6.8 | CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to i | 2018-10-10 19:49:00 | 2010-03-30 17:30:00 |
| CVE-2009-4753 | 7.1 | Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial of service (TCP/IP outage) via long arguments to the (1) XRMD, (2) delete, (3) RNFR, or (4) RNTO command. | 2018-10-10 19:49:00 | 2010-03-29 18:30:00 |
| CVE-2009-4747 | 7.5 | PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220. | 2018-10-10 19:49:00 | 2010-03-26 20:30:00 |
| CVE-2009-4746 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a poll_default login action. | 2018-10-10 19:49:00 | 2010-03-26 20:30:00 |
| CVE-2009-4745 | 7.5 | Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action. | 2018-10-10 19:49:00 | 2010-03-26 20:30:00 |
| CVE-2009-4742 | 7.5 | Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word parameter in a play help action to the faq module, reachable through index.php; (2) the word parameter in a play keyw a | 2018-10-10 19:49:00 | 2010-03-26 20:30:00 |
| CVE-2009-4505 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the name field in a comment, and other unspecified vectors. | 2018-10-10 19:49:00 | 2010-03-26 18:30:00 |
| CVE-2009-4719 | 7.5 | SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter. | 2018-10-10 19:49:00 | 2010-03-18 18:30:00 |
| CVE-2009-4668 | 9.3 | Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long ID3 tag in an MP3 file. NOTE: some of these details are obtained from third party information. | 2018-10-10 19:49:00 | 2010-03-05 18:30:00 |
| CVE-2009-4654 | 9.0 | Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk. | 2018-10-10 19:49:00 | 2010-02-26 18:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: