268011
|
- |
|
bgsvetionik
|
bgs_cms
|
Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: s…
|
CWE-79
Cross-site Scripting
|
CVE-2010-0675
|
2010-02-23 14:00 |
2010-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268012
|
- |
|
katalog.hurricane
|
katalog_stron_hurricane
|
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter.
|
CWE-89
SQL Injection
|
CVE-2010-0677
|
2010-02-23 14:00 |
2010-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268013
|
- |
|
katalog.hurricane
|
katalog_stron_hurricane
|
PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitra…
|
CWE-94
Code Injection
|
CVE-2010-0678
|
2010-02-23 14:00 |
2010-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268014
|
- |
|
hyleos
|
chemview
|
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large num…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-0679
|
2010-02-23 14:00 |
2010-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268015
|
- |
|
onnogroen
|
com_webeecomment
|
SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in…
|
CWE-89
SQL Injection
|
CVE-2009-4650
|
2010-02-23 14:00 |
2010-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268016
|
- |
|
onnogroen
|
com_webeecomment
|
Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML vi…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4651
|
2010-02-23 14:00 |
2010-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268017
|
- |
|
novell
|
edirectory
|
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue …
|
NVD-CWE-noinfo
|
CVE-2010-0666
|
2010-02-22 14:00 |
2010-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268018
|
- |
|
accellion
|
secure_file_transfer_appliance
|
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by ap…
|
CWE-94
Code Injection
|
CVE-2009-4646
|
2010-02-22 14:00 |
2010-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268019
|
- |
|
k5n
|
webcalendar
|
Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via un…
|
CWE-352
Origin Validation Error
|
CVE-2010-0638
|
2010-02-16 14:00 |
2010-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268020
|
- |
|
juniper
|
odyssey_access_client
|
Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute ar…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4643
|
2010-02-16 14:00 |
2010-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|