266071
|
- |
|
opera
|
opera_browser
|
Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that …
|
NVD-CWE-Other
|
CVE-2010-4579
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266072
|
- |
|
opera
|
opera_browser
|
Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same nam…
|
CWE-200
Information Exposure
|
CVE-2010-4580
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266073
|
- |
|
opera
|
opera_browser
|
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."
|
NVD-CWE-noinfo
|
CVE-2010-4581
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266074
|
- |
|
opera
|
opera_browser
|
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-4582
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266075
|
- |
|
opera
|
opera_browser
|
Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted content via a crafted web site.
|
NVD-CWE-Other
|
CVE-2010-4583
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266076
|
- |
|
opera
|
opera_browser
|
Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof t…
|
CWE-310
Cryptographic Issues
|
CVE-2010-4584
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266077
|
- |
|
opera
|
opera_browser
|
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (application crash) by triggering an Opera Unite update.
|
NVD-CWE-noinfo
|
CVE-2010-4585
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266078
|
- |
|
opera
|
opera_browser
|
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508.
|
CWE-16
Configuration
|
CVE-2010-4586
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266079
|
- |
|
cakefoundation
|
cakephp
|
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via…
|
CWE-20
Improper Input Validation
|
CVE-2010-4335
|
2011-01-22 15:44 |
2011-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266080
|
- |
|
zope
|
zodb
|
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a…
|
CWE-362
Race Condition
|
CVE-2010-3495
|
2011-01-22 15:43 |
2010-10-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|