 |
|
|
|
| PgnuPG use-after-free vulnerability | | Published: |  | 28.07.2010 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 11017 | | Type: |  | library | | Level: |  | 7/10 | | Description: |  | Use-after free vulnerability on certificate parsing. |
| Affected: |  | GNU : GnuPG 2.0 | | CVE: |  | CVE-2010-2547 (Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.) |
| Media Player Classic buffer overflow | | Published: | | 28.07.2010 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 11018 | | Type: | | local | | Level: | | 4/10 | | Description: | | Heap buffer overflow on .m3u playlist parsing. |
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
updated since 23.07.2010 | | Published: | | 28.07.2010 | | Source: | | | | SecurityVulns ID: | | 11011 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Original document |  | Salvatore "drosophila" Fresta, PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection (28.07.2010) |
| | | MustLive, New vulnerabilities in Cetera eCommerce (28.07.2010) |
| | | Salvatore "drosophila" Fresta, WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities (28.07.2010) |
| | | MustLive, Multiple vulnerabilities in MC Content Manager (28.07.2010) |
| | | eidelweiss randy, DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit (28.07.2010) |
| | | advisory_(at)_htbridge.ch, XSS vulnerability in SyndeoCMS (28.07.2010) |
| | | advisory_(at)_htbridge.ch, SQL injection vulnerability in Theeta CMS (28.07.2010) |
| | | advisory_(at)_htbridge.ch, XSS vulnerability in SyndeoCMS (28.07.2010) |
| | | advisory_(at)_htbridge.ch, XSS vulnerability in Theeta CMS (28.07.2010) |
| | | advisory_(at)_htbridge.ch, XSS vulnerability in SyndeoCMS (28.07.2010) |
| | | advisory_(at)_htbridge.ch, XSS vulnerability in Theeta CMS (28.07.2010) |
| | | advisory_(at)_htbridge.ch, XSS vulnerability in Theeta CMS (28.07.2010) |
| | | david.kurz_(at)_majorsecurity.net, [MajorSecurity SA-079]PHPKIT WCMS - Multiple stored Cross Site Scripting Issues (28.07.2010) |
| | | Salvatore "drosophila" Fresta, TTVideo 1.0 Joomla Component SQL Injection Vulnerability (28.07.2010) |
| | | ZDI, ZDI-10-136: Novell Teaming ajaxUploadImageFile Remote Code Execution Vulnerability (23.07.2010) |
| | | Andrea Barisani, [oCERT-2010-002] Joomla input sanitization errors (XSS) (23.07.2010) |
| | | MustLive, SQL Injection vulnerability in coWiki (23.07.2010) |
| | | advisories_(at)_intern0t.net, XSS vulnerability in Spitfire search (23.07.2010) |
| | | advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010) |
| | | advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010) |
| | | advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010) |
| | | advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010) |
| | | advisories_(at)_intern0t.net, vBulletin - Critical Information Disclosure (23.07.2010) |
| | | eidelweiss randy, YACK CMS 10.5.27 Remote File Inclusion Vulnerability (23.07.2010) |
| Nessus Web Server security vulnerabilities | | Published: | | 28.07.2010 | | Source: | | NESSUS | | SecurityVulns ID: | | 11019 | | Type: | | remote | | Level: | | 5/10 | | Description: | | nessusd_www_server.nbin plugin information disclosure and crossite scripting. |
|
|
|
|
|
|
|
|
