264891
|
- |
|
apple
|
safari
|
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of …
|
NVD-CWE-noinfo CWE-399
Resource Management Errors
|
CVE-2008-2307
|
2011-03-15 13:00 |
2008-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264892
|
- |
|
djangoproject
|
django
|
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site req…
|
CWE-352
Origin Validation Error
|
CVE-2011-0696
|
2011-03-11 12:51 |
2011-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264893
|
- |
|
djangoproject
|
django
|
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file …
|
CWE-79
Cross-site Scripting
|
CVE-2011-0697
|
2011-03-11 12:51 |
2011-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264894
|
- |
|
openafs
|
openafs
|
The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to c…
|
CWE-20
Improper Input Validation
|
CVE-2011-0431
|
2011-03-11 12:50 |
2011-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264895
|
- |
|
f-secure
|
internet_gatekeeper
|
F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP ses…
|
CWE-287
Improper Authentication
|
CVE-2011-0453
|
2011-03-11 12:50 |
2011-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264896
|
- |
|
epson
|
lp-s7100_driver_4.1.0 lp-s7100_driver_4.1.7 lp-s9000_driver_4.1.0 lp-s9000_driver_4.1.11
|
The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125, set weak permissions for the "C:\Progra…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3920
|
2011-03-11 12:48 |
2010-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264897
|
- |
|
ibm
|
websphere_application_server
|
The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredentia…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-1321
|
2011-03-10 14:00 |
2011-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264898
|
- |
|
mailenable
|
netwebadmin_enterprise netwebadmin_professional
|
webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password.
|
CWE-255
Credentials Management
|
CVE-2006-6239
|
2011-03-10 14:00 |
2006-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264899
|
- |
|
apple
|
itunes
|
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2005-2938
|
2011-03-10 14:00 |
2005-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264900
|
- |
|
ibm
|
websphere_application_server
|
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote atta…
|
CWE-399
Resource Management Errors
|
CVE-2011-1322
|
2011-03-9 14:00 |
2011-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|