|
298281
|
- |
|
memht
|
memht_portal
|
Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a conf…
|
CWE-352
Origin Validation Error
|
CVE-2010-5320
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298282
|
- |
|
kan-studio
|
kandidat_cms
|
Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a vali…
|
CWE-352
Origin Validation Error
|
CVE-2010-5319
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298283
|
- |
|
basic-cms
|
sweetrice
|
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email…
|
CWE-255
Credentials Management
|
CVE-2010-5318
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298284
|
- |
|
basic-cms
|
sweetrice
|
Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (…
|
CWE-89
SQL Injection
|
CVE-2010-5317
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298285
|
- |
|
basic-cms
|
sweetrice
|
Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie.
|
CWE-79
Cross-site Scripting
|
CVE-2010-5316
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298286
|
- |
|
chialab_\&_channelweb
|
bedita
|
Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a dat…
|
CWE-352
Origin Validation Error
|
CVE-2010-5315
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298287
|
- |
|
chialab_\&_channelweb
|
bedita
|
Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5314
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298288
|
- |
|
linux
|
linux_kernel
|
Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulatio…
|
CWE-362
Race Condition
|
CVE-2010-5313
|
2024-11-21 10:23 |
2014-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298289
|
6.1 |
MEDIUM
Network
|
debian jqueryui fedoraproject netapp apache drupal
|
debian_linux jquery_ui fedora snapcenter drill drupal
|
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
|
CWE-79
Cross-site Scripting
|
CVE-2010-5312
|
2024-11-21 10:23 |
2014-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298290
|
- |
|
tetex gnome t1lib
|
tetex evince t1lib
|
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (c…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-0433
|
2024-11-21 10:23 |
2012-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|