|
302631
|
- |
|
ibm
|
tivoli_directory_server
|
IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-4216
|
2024-11-21 10:20 |
2010-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302632
|
- |
|
wellsfargo
|
wells_fargo_mobile
|
The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive info…
|
CWE-310
Cryptographic Issues
|
CVE-2010-4214
|
2024-11-21 10:20 |
2010-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302633
|
- |
|
bankofamerica
|
bank_of_america
|
The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading applicat…
|
CWE-310
Cryptographic Issues
|
CVE-2010-4213
|
2024-11-21 10:20 |
2010-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302634
|
- |
|
usaa
|
usaa
|
The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application da…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-4212
|
2024-11-21 10:20 |
2010-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302635
|
- |
|
ebay
|
paypal
|
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal…
|
CWE-287
Improper Authentication
|
CVE-2010-4211
|
2024-11-21 10:20 |
2010-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302636
|
- |
|
yahoo
|
yui
|
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary…
|
CWE-79
Cross-site Scripting
|
CVE-2010-4209
|
2024-11-21 10:20 |
2010-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302637
|
- |
|
yahoo
|
yui
|
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary…
|
CWE-79
Cross-site Scripting
|
CVE-2010-4208
|
2024-11-21 10:20 |
2010-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302638
|
- |
|
yahoo
|
yui
|
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary…
|
CWE-79
Cross-site Scripting
|
CVE-2010-4207
|
2024-11-21 10:20 |
2010-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302639
|
- |
|
adobe
|
acrobat_reader acrobat
|
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a deni…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-4091
|
2024-11-21 10:20 |
2010-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
302640
|
8.8 |
HIGH
Network
|
google webkitgtk fedoraproject
|
chrome webkitgtk fedora
|
Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, al…
|
CWE-787
Out-of-bounds Write
|
CVE-2010-4206
|
2024-11-21 10:20 |
2010-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|