CVE-2010-1386

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357...

CVE-2010-1760

Removed by vendor...

CVE-2010-1386

The concrete details in connected documents show CVE-2010-1386 affects WebKit/WebCore: page/Geolocation.cpp did not properly restrict access to the lastPosition function, with unspecified impact and remote attack vectors. Root cause is insufficient access control in Geolocation.lastPosition. Affe...

CVE-2010-1760

CVE-2010-1760 affects loader/DocumentThreadableLoader.cpp in the WebKit WebCore XMLHttpRequest implementation, before r58409. The vulnerability arises because credentials are not properly handled during a cross-origin synchronous request. The description specifies an unspecified impact with poten...

kernel: tty: release_one_tty() forgets to put pids

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...

CVE-2010-2994

CVE-2010-2994 concerns a stack-based buffer overflow in the ASN.1 BER dissector of Wireshark. Affected versions are Wireshark 0.10.13–1.0.14 and 1.2.0–1.2.9. The vulnerability has unknown impact and remote attack vectors, and it is noted as a regression related to CVE-2010-2284. The provided conn...

CVE-2010-2994

Stack-based buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.14 and 1.2.0 through 1.2.9 has unknown impact and remote attack vectors. NOTE: this issue exists because of a CVE-2010-2284 regression...

CVE-2010-2900

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

CVE-2010-2903

Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors...

CVE-2010-2903

Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors...

CVE-2010-2903

Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors...

CVE-2010-2897

Removed by vendor...

CVE-2010-2903

Google Chrome CVE-2010-2903 affects Chrome versions prior to 5.0.375.125, where the browser may truncate and improperly elide hostnames. Root cause described as an issue in hostname handling; impact is unspecified in the provided documents. Exploitation details are not disclosed in the connected ...

CVE-2010-2646

Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors...

CVE-2010-2650

CVE-2010-2650 affects Google Chrome prior to 5.0.375.99. Public details across connected docs indicate multiple vulnerabilities addressed in the 5.0.375.99 update, with the OpenVAS/Seebug entries confirming that Google Chrome 5.0.375.99 fixed several issues. Concrete items from Seebug include mul...

FreeBSD Ports: kvirc, kvirc-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-2517

Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report...

CVE-2010-2517

CVE-2010-2517 affects IBM Rational ClearQuest prior to 7.1.1.02. The connected sources provide no concrete root cause or exploit details beyond “multiple unspecified vulnerabilities” demonstrated by an AppScan report. The CVSS/metrics in the NVD entry indicate a Network attack vector with low com...