|
354971
|
- |
|
amsn
|
amsn
|
login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.
|
CWE-255
Credentials Management
|
CVE-2008-7255
|
2010-06-3 13:00 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354972
|
- |
|
lispeltuut
|
com_archeryscores
|
Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a…
|
CWE-22
Path Traversal
|
CVE-2010-1718
|
2010-06-1 13:00 |
2010-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354973
|
- |
|
freebsd
|
freebsd
|
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read,…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-2022
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354974
|
- |
|
intervations
|
filecopa
|
Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this informatio…
|
CWE-22
Path Traversal
|
CVE-2010-2112
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354975
|
- |
|
brekeke
|
pbx
|
Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.we…
|
CWE-352
Origin Validation Error
|
CVE-2010-2114
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354976
|
- |
|
solarwinds
|
tftp_server
|
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
|
CWE-20
Improper Input Validation
|
CVE-2010-2115
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354977
|
- |
|
hp
|
mercury_testdirector_for_quality_center
|
Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2010-1959
|
2010-05-29 14:47 |
2010-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354978
|
- |
|
microsoft
|
asp.net
|
Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks…
|
CWE-79
Cross-site Scripting
|
CVE-2010-2084
|
2010-05-28 13:00 |
2010-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354979
|
- |
|
microsoft
|
.net_framework
|
The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks…
|
CWE-79
Cross-site Scripting
|
CVE-2010-2085
|
2010-05-28 13:00 |
2010-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
354980
|
- |
|
apache
|
myfaces
|
Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-…
|
CWE-79
Cross-site Scripting
|
CVE-2010-2086
|
2010-05-28 13:00 |
2010-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
