|
304471
|
- |
|
drupal
|
devel_module
|
Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url al…
|
CWE-79
Cross-site Scripting
|
CVE-2010-3022
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304472
|
- |
|
opera
|
opera_browser
|
Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) via an animated PNG image.
|
CWE-399
Resource Management Errors
|
CVE-2010-3021
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304473
|
- |
|
opera
|
opera_browser
|
The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3020
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304474
|
- |
|
opera
|
opera_browser
|
Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via vectors related to HTML5 canvas paintin…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-3019
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304475
|
- |
|
cisco
|
ios
|
Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, related to embryonic TCP connections that remain in the SYN_RCVD…
|
CWE-20
Improper Input Validation
|
CVE-2010-2827
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304476
|
- |
|
pligg
|
pligg_cms
|
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
|
CWE-89
SQL Injection
|
CVE-2010-3013
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304477
|
- |
|
mozilla
|
bugzilla
|
Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases,…
|
CWE-189
Numeric Errors
|
CVE-2010-2759
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304478
|
- |
|
mozilla
|
bugzilla
|
Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remo…
|
CWE-200
Information Exposure
|
CVE-2010-2758
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304479
|
- |
|
mozilla
|
bugzilla
|
The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remot…
|
CWE-310
Cryptographic Issues
|
CVE-2010-2757
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304480
|
- |
|
mozilla
|
bugzilla
|
Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors i…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-2756
|
2024-11-21 10:17 |
2010-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|