CVE-2010-4773Hitachi EUR Form Client and Service, ainsi que uCosminexus EUR Form Service, sont affectés sur les systèmes Windows, Linux et AIX. Un attaquant distant peut exécuter du code arbitr…
10.0 ÉLEVÉE
CVE-2010-4772Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php.
4.3 MOYENNE
CVE-2010-4771La version 2.5 de S-CMS est affectée par une faille dans la page `viewforum.php` qui permet à un attaquant d'exécuter des commandes SQL non autorisées. Un attaquant distant peut ex…
7.5 ÉLEVÉE
CVE-2010-4770Le script CommodityRentals DVD Rentals est affecté par une faille dans la gestion du paramètre `cat_id` sur sa page de catalogue. Un attaquant distant non authentifié peut utiliser…
7.5 ÉLEVÉE
CVE-2010-4769Le composant Jimtawl pour Joomla! (version 1.0.2) contient une faille qui permet à des attaquants distants de lire des fichiers arbitraires sur votre serveur. En envoyant une requê…
7.5 ÉLEVÉE
CVE-2011-0194Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TI…
6.8 MOYENNE
CVE-2011-0193Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craft…
6.8 MOYENNE
CVE-2011-0190Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network…
4.3 MOYENNE
CVE-2011-0189The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-i…
5.0 MOYENNE
CVE-2011-0188The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly alloc…
6.8 MOYENNE
CVE-2011-0187The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving …
4.3 MOYENNE
CVE-2011-0186QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPE…
4.3 MOYENNE
CVE-2011-0184QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel…
6.8 MOYENNE
CVE-2011-0183Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lock…
5.0 MOYENNE
CVE-2011-0182Les versions d'Apple Mac OS X antérieures à 10.6.7 contiennent une faille dans la manière dont le noyau gère certains appels système. Un utilisateur local peut exploiter cette vuln…
7.2 ÉLEVÉE
CVE-2011-0181Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM ima…
6.8 MOYENNE
CVE-2011-0180Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.
2.1 FAIBLE
CVE-2011-0179CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document tha…
6.8 MOYENNE
CVE-2011-0178The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local …
2.1 FAIBLE
CVE-2011-0177Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT …
6.8 MOYENNE
CVE-2011-0176Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embed…
6.8 MOYENNE
CVE-2011-0175Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embed…
6.8 MOYENNE
CVE-2011-0174Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted emb…
6.8 MOYENNE
CVE-2011-0173Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (appl…
6.8 MOYENNE
CVE-2011-0172AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network, …
4.9 MOYENNE
CVE-2011-1506The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert comman…
6.8 MOYENNE
CVE-2011-1505IBM Lotus Quickr 8.1 (versions antérieures à 8.1.0.27) est affecté par une faille critique dans ses services Domino. Un attaquant distant peut compromettre totalement le système, p…
10.0 ÉLEVÉE
CVE-2011-1414Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to injec…
4.3 MOYENNE
CVE-2011-1022The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that …
2.1 FAIBLE
CVE-2011-1006Les systèmes Linux utilisant la bibliothèque `libcgroup` (versions antérieures à 0.37.1) sont affectés par une faille de corruption de mémoire. Un utilisateur local peut l'exploite…
7.2 ÉLEVÉE
CVE-2011-0759Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration page in the Recaptcha (aka WP-reCAPTCHA) plugin 2.9.8.2 for WordPress allow remote attackers to hija…
6.8 MOYENNE
CVE-2011-0331Les systèmes utilisant le contrôle ActiveX Honeywell ScanServer (version 780.0.20.5) sont susceptibles de permettre l'exécution de code à distance. Un attaquant peut prendre le con…
9.3 ÉLEVÉE
CVE-2010-4228Les serveurs FTP Novell NetWare (NWFTPD.NLM) antérieurs à la version 5.10.02 sont sensibles à un dépassement de tampon déclenché par une commande DELE surdimensionnée. Un attaquant…
9.0 ÉLEVÉE
CVE-2009-5062IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service (daemon crash) by subscribing to an Atom feed, …
3.5 FAIBLE
CVE-2009-5061Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to…
2.1 FAIBLE
CVE-2009-5060Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by ac…
3.5 FAIBLE
CVE-2009-5059Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by ch…
3.5 FAIBLE
CVE-2009-5058Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by deleting…
3.5 FAIBLE
CVE-2008-7286IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of servic…
3.5 FAIBLE
CVE-2008-7285Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial o…
5.0 MOYENNE
CVE-2008-7284IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by clicking a download link, aka SPR QC…
3.5 FAIBLE
CVE-2011-1471Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed …
4.3 MOYENNE
CVE-2011-1470The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by th…
4.3 MOYENNE
CVE-2011-1469Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// UR…
4.3 MOYENNE
CVE-2011-1468Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the open…
4.3 MOYENNE
CVE-2011-1467Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a…
5.0 MOYENNE
CVE-2011-1466Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a…
5.0 MOYENNE
CVE-2011-1465The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to …
5.0 MOYENNE
CVE-2011-1464Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of …
4.3 MOYENNE
CVE-2011-1081modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (a…
5.0 MOYENNE