CVEs published in September 2010
287 vulnerabilities, 50 critical, 1 exploited.
- google chrome, webkitgtk +1 moreGoogle Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes,...9.3 High
- google chromeThe implementation of notification permissions in Google Chrome before 6.0.472.53 allows...10.0 High
- google chromeUse-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53...10.0 High
- google chromeThe WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause...4.3 Medium
- google chromeUnspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate...5.0 Medium
- google chromeGoogle Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote...9.3 High
- google chrome, canonical ubuntu linux +1 moreGoogle Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has...5.0 Medium
- google chromeGoogle Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows...4.3 Medium
- google chromeGoogle Chrome before 6.0.472.53 does not properly handle the _blank value for the target...4.3 Medium
- blackboard transact suiteThe automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce...2.1 Low
- blackboard transact suiteBbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before...4.6 Medium
- microsoft outlook web accessCross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007...6.8 Medium
- adobe shockwave playerUnspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to...9.3 High
- microsoft windows 7, windows xp, windows 2003 server +3 more +5 moreBuffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3,...7.2 High
- gnome power managergnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate...7.2 High
- xfce** DISPUTED ** Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or...7.2 High
- gnome power managergnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate...7.2 High
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated...3.5 Low
- twikiCross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to...6.8 Medium
- google chromeThe WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer...10.0 High
- quaggabgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to...5.0 Medium
- quaggaStack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in...6.5 Medium
- blentz smbindThe filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4...7.5 High
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 moreThe irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901...4.9 Medium
- opensuse** DISPUTED ** lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other...7.2 High
- novell suse linuxWebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a...5.0 Medium
- novell suse lifecycle management serverCross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle...4.3 Medium
- seagullproject.org seagullSQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to...7.5 High
- jextn com jefaqproMultiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for...7.5 High
- martin lee multi-lingual e-commerce systemMultiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow...7.5 High
- seagullproject.org seagullMultiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to...7.5 High
- wiccle web builderCross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1...4.3 Medium
- galeriashqipSQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled,...6.8 Medium
- diy-cmsMultiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to...7.5 High
- textpatternPHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote...7.5 High
- pecio-cms pecio cmsMultiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to...7.5 High
- xmlswf com picsellDirectory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows...5.0 Medium