Design/Logic Flaw

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...

CVE-2010-1273

CVE-2010-1273 affects Emweb Wt prior to 3.1.1. The root cause is that UTF-8 encoding for (1) form values and (2) JSignal arguments is not validated. The provided sources describe the condition and impact as unspecified, with remote attack vectors implied but not detailed. No remediation or fixed ...

CVE-2010-1243

The IBM Web Interface for Content Management aka WEBi before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors...

Code injection

The IBM Web Interface for Content Management aka WEBi before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors...

CVE-2010-1243

The IBM Web Interface for Content Management aka WEBi before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors...

CVE-2003-1595

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...

Design/Logic Flaw

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security STS state, which has unspecified impact and attack vectors...

Design/Logic Flaw

The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors...

CVE-2010-1229

Removed by vendor...

CVE-2010-0845

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2009-4763

The CVE-2009-4763 entry is connected to concrete disclosures for CVE-2008-5793. The vulnerability is in the Joomla Clickheat (com_clickheat) component used by PhpMyVisites prior to 2.4, where multiple PHP remote file inclusion (RFI) flaws exist in ClickHeat/Recly code paths. Specifically, allows ...

Code injection

Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors...

CVE-2009-4741

Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors...

Directory traversal

Directory traversal vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors...

CVE-2009-4740

Summary: CVE-2009-4740 describes a directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension for TYPO3, affecting version 1.0.2 and earlier. Affected software: TYPO3 environment with ws_ecard extension (version ≤ 1.0.2). Vulnerability details: Directory traversal via the ws_eca...

CVE-2009-4741

Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors...

openssl: missing bn_wexpand return value checks

OpenSSL before 0.9.8m does not check for a NULL return value from bnwexpand function calls in 1 crypto/bn/bndiv.c, 2 crypto/bn/bngf2m.c, 3 crypto/ec/ec2smpl.c, and 4 engines/eubsec.c, which has unspecified impact and context-dependent attack vectors...

Code injection

Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager CM Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors...

CVE-2010-1041

The CVE-2010-1041 entry concerns IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13. The vulnerability is in the single sign-on Web Services implementation; the root cause is not specified in the available documents. Impact is d...

Pwn2Own Predictions: Apple iPhone Will Fall

Hackers at this year’s CanSecWest Pwn2Own contest will definitely break into an Apple iPhone by exploiting a remote code execution vulnerability. That’s the prediction from Charlie Miller and Aaron Portnoy, two security researchers who are monitoring events leading to next week’s hacker challenge...