Joomla Password Reset Weakness and Session Fixation Vulnerability

No description provided by source. A weakness and a vulnerability have been reported in Joomla, which can be exploited by malicious people to disclose sensitive information and conduct session fixation attacks. 1 The weakness is caused due to password reset tokens being stored in plain text in th...

CVE-2010-1505: Undefined Security Weakness

Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors...

CVE-2010-1490: Undefined Security Weakness

Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors...

TCPDF 4.5.0364.9.5 - params Attribute Remote Code Execution

TCPDF 4.5.0364.9.5 - params Attribute Remote Code Execution source: https://www.securityfocus.com/bid/39315/info TCPDF is prone to a security weakness that may allow attackers to execute arbitrary code. An attacker can exploit this issue in conjunction with other latent vulnerabilities to execute...

TCPDF 4.5.036/4.9.5 - 'params' Attribute Remote Code Execution

source: https://www.securityfocus.com/bid/39315/info TCPDF is prone to a security weakness that may allow attackers to execute arbitrary code. An attacker can exploit this issue in conjunction with other latent vulnerabilities to execute arbitrary code with the privileges of the webserver. Versio...

CVE-2003-1595: Undefined Security Weakness

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...

CVE-2010-1229: Undefined Security Weakness

The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors...

CVE-2009-4763: Undefined Security Weakness

Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack vectors. NOTE: due to lack of details from the vendor, it is not clear whether this is related to CVE-2008-5793...

CVE-2010-1182: Undefined Security Weakness

Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server WAS 7.0.x before 7.0.0.9 on z/OS have unknown impact and attack vectors...

CVE-2009-4741: Undefined Security Weakness

Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors...

SuSE Update for OpenOffice_org SUSE-SA:2010:017

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

SuSE Update for OpenOffice_org SUSE-SA:2010:017

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1980)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

CVE-2010-0937: Undefined Security Weakness

Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors...

Mozilla Thunderbird < 2.0.0.23 Certificate Authority (CA) Common Null Byte Handling SSL MiTM Weakness

Binary data 801349.prm...

CVE-2010-0918: Undefined Security Weakness

Multiple unspecified vulnerabilities in the UltraLite functionality in IBM Lotus iNotes aka Domino Web Access or DWA before 229.281 for Domino 8.0.2 FP4 have unknown impact and attack vectors...

Digium Asterisk IAX2 Call Number Denial Of Service (CVE-2009-2346)

A resource exhaustion based denial of service vulnerability exists in Digium's Asterisk. The vulnerability is due to a design weakness in the way Asterisk associates messages with the calls they belong to. An unauthenticated, remote attacker can exploit this vulnerability by sending a large numbe...

Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)

An elevation of privilege vulnerability exists in the Windows Kernel due to the way the kernel handles certain exceptions. The Windows Kernel is the core of the operating system. It provides system level services such as device management and memory management, allocates processor time to...

CVE-2010-0717: Undefined Security Weakness

The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...

CVE-2010-0669: Undefined Security Weakness

MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors...