CVE List

Id CVE No. Status Description Phase Votes Comments Actions
43542  CVE-2010-0958  Candidate  Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from third party information.  Assigned (20100309)  None (candidate not yet proposed)    View
43798  CVE-2010-1214  Candidate  Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.  Assigned (20100330)  None (candidate not yet proposed)    View
44054  CVE-2010-1470  Candidate  Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.  Assigned (20100419)  None (candidate not yet proposed)    View
44310  CVE-2010-1726  Candidate  SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  Assigned (20100505)  None (candidate not yet proposed)    View
44566  CVE-2010-1982  Candidate  Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.  Assigned (20100519)  None (candidate not yet proposed)    View

Page 1813 of 20943, showing 5 records out of 104715 total, starting on record 9061, ending on 9065

Actions