Search

Expected end of text, found '.' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (332944 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2010-4264 1 Vanillaforums 1 Vanilla Forums 2024-11-21 6.1 Medium
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.
CVE-2010-4245 1 Translatehouse 1 Pootle 2024-11-21 6.1 Medium
pootle 2.0.5 has XSS via 'match_names' parameter
CVE-2010-4241 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 8.8 High
Tiki Wiki CMS Groupware 5.2 has CSRF
CVE-2010-4240 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 6.1 Medium
Tiki Wiki CMS Groupware 5.2 has XSS
CVE-2010-4239 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 9.8 Critical
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
CVE-2010-4237 1 Mercurial 1 Mercurial 2024-11-21 5.9 Medium
Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.
CVE-2010-4178 2 Fedoraproject, Oracle 2 Fedora, Mysql-gui-tools 2024-11-21 5.5 Medium
MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console
CVE-2010-4177 2 Fedoraproject, Oracle 2 Fedora, Mysql-gui-tools 2024-11-21 5.5 Medium
mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes.
CVE-2010-3917 1 Google 1 Chrome 2024-11-21 6.5 Medium
Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site.
CVE-2010-3857 1 Redhat 1 Jboss Business Rules Management System 2024-11-21 6.1 Medium
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.
CVE-2010-3844 2 Debian, Ettercap-project 2 Debian Linux, Ettercap 2024-11-21 8.8 High
An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.
CVE-2010-3843 1 Ettercap-project 1 Ettercap 2024-11-21 7.8 High
The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.
CVE-2010-3782 2 Obs-server, Suse 2 Obs-server, Linux Enterprise Server 2024-11-21 8.8 High
obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.
CVE-2010-3674 2 Debian, Typo3 2 Debian Linux, Typo3 2024-11-21 6.1 Medium
TYPO3 before 4.4.1 allows XSS in the frontend search box.
CVE-2010-3673 1 Typo3 1 Typo3 2024-11-21 5.3 Medium
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
CVE-2010-3672 1 Typo3 1 Typo3 2024-11-21 6.1 Medium
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.
CVE-2010-3671 1 Typo3 1 Typo3 2024-11-21 6.5 Medium
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijack a victim's session.
CVE-2010-3670 1 Typo3 1 Typo3 2024-11-21 4.8 Medium
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.
CVE-2010-3669 1 Typo3 1 Typo3 2024-11-21 5.4 Medium
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box.
CVE-2010-3668 1 Typo3 1 Typo3 2024-11-21 7.5 High
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.