|
303141
|
- |
|
w3m
|
w3m
|
istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alter…
|
CWE-20
Improper Input Validation
|
CVE-2010-2074
|
2024-11-21 10:15 |
2010-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303142
|
7.5 |
HIGH
Network
|
debian
|
pyftpd
|
auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allows remote attackers to read arbitrary files from the FTP se…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2010-2073
|
2024-11-21 10:15 |
2010-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303143
|
- |
|
radovan_garabik
|
pyftpd
|
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
|
CWE-310
Cryptographic Issues
|
CVE-2010-2072
|
2024-11-21 10:15 |
2010-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303144
|
- |
|
linux
|
linux_kernel
|
The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permiss…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-2071
|
2024-11-21 10:15 |
2010-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303145
|
- |
|
xensource
|
xen
|
arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, allows local users to cause a denial of service and "turn on…
|
NVD-CWE-Other
|
CVE-2010-2070
|
2024-11-21 10:15 |
2010-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303146
|
- |
|
xnview
|
xnview
|
Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Enc…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-1932
|
2024-11-21 10:15 |
2010-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303147
|
- |
|
standards_based_linux_instrumentation
|
sblim-sfcb
|
Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of serv…
|
CWE-189
Numeric Errors
|
CVE-2010-2054
|
2024-11-21 10:15 |
2010-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303148
|
- |
|
standards_based_linux_instrumentation
|
sblim-sfcb
|
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value to…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-1937
|
2024-11-21 10:15 |
2010-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303149
|
- |
|
unrealircd
|
unrealircd
|
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which …
|
CWE-20
Improper Input Validation
|
CVE-2010-2075
|
2024-11-21 10:15 |
2010-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303150
|
9.8 |
CRITICAL
Network
|
joomla
|
joomla\!
|
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently retrieve password reset tokens from the da…
|
-
|
CVE-2010-1435
|
2024-11-21 10:14 |
2021-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|