CVE-2010-4726: Undefined Security Weakness

Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669...

CVE-2010-4458: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...

CVE-2010-3912: Undefined Security Weakness

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...

SSH password weakness

Added: 01/05/2011 CVE: CVE-1999-0502 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

Mozilla accidentally publishes user IDs and passwords hashes !

On Monday, Mozilla, the developer of popular open source applications like Firefox and Thunderbird, announced that a database containing usernames and password hashes belonging to users of addons.mozilla.org had been posted publicly by accident. If you registered for an account on...

CVE-2010-4511: Undefined Security Weakness

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."...

CVE-2010-4509: Undefined Security Weakness

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the 1 mt:AssetProperty and 2 mt:EntryFlag tags...

CVE-2010-4039: Undefined Security Weakness

Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors...

CVE-2010-3398: Undefined Security Weakness

Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W...

CVE-2010-3193: Undefined Security Weakness

Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors...

CVE-2010-3114: Undefined Security Weakness

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

Microsoft Internet Explorer 8 - toStaticHTML() HTML Sanitization Bypass

Microsoft Internet Explorer 8 - toStaticHTML HTML Sanitization Bypass source: https://www.securityfocus.com/bid/42467/info Internet Explorer 8 is prone to a security-bypass weakness. Internet Explorer 8 includes a method designed to sanitize executable script constructs from HTML. Attackers can...

CVE-2010-2897: Undefined Security Weakness

Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors...

CVE-2010-2898: Undefined Security Weakness

Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors...

Multiple Vulnerabilities in DT Centrepiece

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DT Centrepiece which could be exploited to perform cross-site scripting attacks and bypass certain security restrictions. 1 Cross-site scripting XSS vulnerabilities in DT Centrepiece 1.1 The vulnerability exists...

Pre E-Smart Cart - Authentication Bypass

Pre E-Smart Cart - Authentication Bypass Exploit Title:Pre E smart cart authentication bypass Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 49$ Software Link:http://preproject.com/smartcart.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty,...

CVE-2010-2650: Undefined Security Weakness

Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "annoyance with print dialogs."...

DistCC Daemon Command Execution

DistCC Daemon Command Execution. CVE-2004-2687. Remote exploit for linux platform $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for...

CVE-2010-2517: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report...

CVE-2010-2421: Undefined Security Weakness

Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...