|
298681
|
- |
|
amberdms
|
amberdms_billing_system
|
Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5291
|
2024-11-21 10:22 |
2014-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298682
|
- |
|
adobe
|
coldfusion
|
The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to o…
|
CWE-255
Credentials Management
|
CVE-2010-5290
|
2024-11-21 10:22 |
2013-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298683
|
- |
|
incredimail
|
incredimail
|
Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2.0 allows remote attackers to cause a denial of service (application crash) or …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-5289
|
2024-11-21 10:22 |
2013-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298684
|
- |
|
indra
|
editran_communications_platform
|
Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrar…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-5288
|
2024-11-21 10:22 |
2013-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298685
|
- |
|
openbsd
|
openssh
|
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial…
|
NVD-CWE-Other
|
CVE-2010-5107
|
2024-11-21 10:22 |
2013-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298686
|
- |
|
cstech
|
webconductor
|
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2010-5287
|
2024-11-21 10:22 |
2013-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298687
|
- |
|
joobi
|
com_jstore
|
Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the con…
|
CWE-22
Path Traversal
|
CVE-2010-5286
|
2024-11-21 10:22 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298688
|
- |
|
o-dyn
|
collabtive
|
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via …
|
CWE-352
Origin Validation Error
|
CVE-2010-5285
|
2024-11-21 10:22 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298689
|
- |
|
o-dyn
|
collabtive
|
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to ma…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5284
|
2024-11-21 10:22 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298690
|
- |
|
opentext
|
livelink_ecm
|
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder an…
|
CWE-352
Origin Validation Error
|
CVE-2010-5283
|
2024-11-21 10:22 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
