|
347301
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable.
|
CWE-89
SQL Injection
|
CVE-2010-1134
|
2017-08-17 10:32 |
2010-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347302
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
|
CWE-255
Credentials Management
|
CVE-2010-1135
|
2017-08-17 10:32 |
2010-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347303
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictabl…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-1136
|
2017-08-17 10:32 |
2010-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347304
|
- |
|
irssi
|
irssi
|
Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certific…
|
CWE-20
Improper Input Validation
|
CVE-2010-1155
|
2017-08-17 10:32 |
2010-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347305
|
- |
|
irssi
|
irssi
|
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at th…
|
NVD-CWE-Other
|
CVE-2010-1156
|
2017-08-17 10:32 |
2010-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347306
|
- |
|
irssi
|
irssi
|
Per: http://cwe.mitre.org/data/definitions/476.html
'NULL Pointer Dereference'
|
NVD-CWE-Other
|
CVE-2010-1156
|
2017-08-17 10:32 |
2010-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347307
|
- |
|
atlassian
|
jira
|
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path an…
|
CWE-94
Code Injection
|
CVE-2010-1165
|
2017-08-17 10:32 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347308
|
- |
|
atlassian
|
jira
|
Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter …
|
CWE-79
Cross-site Scripting
|
CVE-2010-1164
|
2017-08-17 10:32 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347309
|
- |
|
cisco
|
tftp_server
|
Cisco TFTP Server 1.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) read (aka RRQ) or (2) write (aka WRQ) request, or other TFTP packet. NOTE: some of these d…
|
CWE-20
Improper Input Validation
|
CVE-2010-1174
|
2017-08-17 10:32 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347310
|
- |
|
apple
|
safari
|
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) via a JavaScript loop that attempts to construct an infinitely long string.
|
NVD-CWE-noinfo
|
CVE-2010-1178
|
2017-08-17 10:32 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|