271531
|
- |
|
php
|
php
|
The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended ac…
|
CWE-20
Improper Input Validation
|
CVE-2010-1129
|
2010-08-31 14:42 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271532
|
- |
|
viewvc
|
viewvc
|
lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted…
|
NVD-CWE-noinfo
|
CVE-2008-4325
|
2010-08-30 13:00 |
2008-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271533
|
- |
|
blackboard
|
blackboard_learning_and_community_post_systems
|
Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to i…
|
CWE-79
Cross-site Scripting
|
CVE-2007-5227
|
2010-08-30 13:00 |
2007-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271534
|
- |
|
uninet
|
statsplus
|
Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to s…
|
CWE-79
Cross-site Scripting
|
CVE-2002-2330
|
2010-08-30 13:00 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271535
|
- |
|
novell
|
iprint
|
Buffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors, as dem…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-3176
|
2010-08-25 14:36 |
2009-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271536
|
- |
|
avahi
|
avahi-daemon
|
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast …
|
CWE-399
Resource Management Errors
|
CVE-2009-0758
|
2010-08-12 23:13 |
2009-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271537
|
- |
|
squid-cache
|
squid
|
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (…
|
NVD-CWE-Other
|
CVE-2010-0639
|
2010-08-2 13:00 |
2010-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271538
|
- |
|
squid-cache
|
squid
|
Per: http://cwe.mitre.org/data/definitions/476.html
'NULL Pointer Dereference'
|
NVD-CWE-Other
|
CVE-2010-0639
|
2010-08-2 13:00 |
2010-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271539
|
- |
|
mediawiki
|
mediawiki
|
Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets …
|
CWE-79
Cross-site Scripting
|
CVE-2010-1647
|
2010-07-30 14:48 |
2010-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271540
|
- |
|
mediawiki
|
mediawiki
|
Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for re…
|
CWE-352
Origin Validation Error
|
CVE-2010-1648
|
2010-07-30 14:48 |
2010-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|