|
304341
|
6.1 |
MEDIUM
Network
|
redhat
|
jboss_business_rules_management_system
|
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2010-3857
|
2024-11-21 10:19 |
2019-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304342
|
8.8 |
HIGH
Network
|
ettercap-project debian
|
ettercap debian_linux
|
An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.
|
CWE-120
Classic Buffer Overflow
|
CVE-2010-3844
|
2024-11-21 10:19 |
2019-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304343
|
6.1 |
MEDIUM
Network
|
typo3 debian
|
typo3 debian_linux
|
TYPO3 before 4.4.1 allows XSS in the frontend search box.
|
CWE-79
Cross-site Scripting
|
CVE-2010-3674
|
2024-11-21 10:19 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304344
|
5.3 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
|
CWE-200
Information Exposure
|
CVE-2010-3673
|
2024-11-21 10:19 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304345
|
6.1 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.
|
CWE-79
Cross-site Scripting
|
CVE-2010-3672
|
2024-11-21 10:19 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304346
|
6.5 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijack a victim's session.
|
CWE-384
Session Fixation
|
CVE-2010-3671
|
2024-11-21 10:19 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304347
|
4.8 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.
|
CWE-326
Inadequate Encryption Strength
|
CVE-2010-3670
|
2024-11-21 10:19 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304348
|
5.4 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box.
|
CWE-79 CWE-601
Cross-site Scripting Open Redirect
|
CVE-2010-3669
|
2024-11-21 10:19 |
2019-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304349
|
7.5 |
HIGH
Network
|
typo3
|
typo3
|
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.
|
CWE-74
Injection
|
CVE-2010-3668
|
2024-11-21 10:19 |
2019-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304350
|
5.3 |
MEDIUM
Network
|
typo3
|
typo3
|
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.
|
CWE-20
Improper Input Validation
|
CVE-2010-3667
|
2024-11-21 10:19 |
2019-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|