266651
|
- |
|
gallarific
|
php_photo_gallery_script
|
SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2011-0519
|
2011-01-24 14:00 |
2011-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266652
|
- |
|
otrs
|
otrs
|
Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an H…
|
CWE-79
Cross-site Scripting
|
CVE-2010-4071
|
2011-01-24 14:00 |
2011-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266653
|
- |
|
opera
|
opera_browser
|
Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that …
|
NVD-CWE-Other
|
CVE-2010-4579
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266654
|
- |
|
opera
|
opera_browser
|
Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same nam…
|
CWE-200
Information Exposure
|
CVE-2010-4580
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266655
|
- |
|
opera
|
opera_browser
|
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."
|
NVD-CWE-noinfo
|
CVE-2010-4581
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266656
|
- |
|
opera
|
opera_browser
|
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-4582
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266657
|
- |
|
opera
|
opera_browser
|
Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted content via a crafted web site.
|
NVD-CWE-Other
|
CVE-2010-4583
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266658
|
- |
|
opera
|
opera_browser
|
Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof t…
|
CWE-310
Cryptographic Issues
|
CVE-2010-4584
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266659
|
- |
|
opera
|
opera_browser
|
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (application crash) by triggering an Opera Unite update.
|
NVD-CWE-noinfo
|
CVE-2010-4585
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266660
|
- |
|
opera
|
opera_browser
|
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508.
|
CWE-16
Configuration
|
CVE-2010-4586
|
2011-01-22 15:45 |
2010-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|