3592 matches found
CVE-2009-5015
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
CVE-2009-5015
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
Design/Logic Flaw
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
CVE-2009-5015
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
Path traversal
Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors...
CVE-2010-4039
Removed by vendor...
Joomla! Component Community Builder Enhanced (CBE) 1.4.81.4.91.4.10 - Local File Inclusion Remote Code Execution
Joomla! Component Community Builder Enhanced CBE 1.4.81.4.91.4.10 - Local File Inclusion Remote Code Execution Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be...
Race condition
Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...
CVE-2010-3412
Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...
Code injection
Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W...
ColdUserGroup 1.6 Bypass / Cross Site Scripting
Exploit Title: ColdUserGroup - Version 1.6 bypass/XSS Vulnerabilities Date: 09/09/2010 Author: Sangteamtham Software Link: http://www.coldgen.com/index.cfm?ColdGen=ProductDetails&ProductID=8 Version: 1.22 Tested on: Windows 7 1.Description: Built using Fusebox and adhering to CSS/XHTML standards...
CVE-2010-1809
The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...
Design/Logic Flaw
Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors...
CVE-2010-3256
Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...
CVE-2010-3193
Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors...
Design/Logic Flaw
Unspecified vulnerability in an ActiveX control in the Internet Explorer IE plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."...
CVE-2010-3186
IBM WebSphere Application Server 7.x before 7.0.0.13 and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32 are affected when using a JAX-WS application; the WS-Security policy IncludeTimestamp setting is not handled correctly, with unspecified impact and remote a...
CVE-2010-2362
Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...
CVE-2010-2361
Winny 2.0b7.1 and earlier contains a vulnerability in the processing of BBS information. This flaw can enable a remote attacker to participate in distributed denial-of-service (DDoS) activities. The public sources (e.g., JVN/JVNDB) explicitly advise not using Winny as the mitigation. No patch or ...