Archive
January 2010
Vulnerabilities first published in this month (UTC), newest first.
118 results · Clear filters · Feed
-
Unscored —CVE-2010-0462 Public exploit
Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated us…
-
Unscored —CVE-2010-0459 Public exploit
SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! a…
-
Unscored —CVE-2010-0461 Public exploit
SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arb…
-
Unscored —CVE-2010-0456 Public exploit
SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote att…
-
Unscored —CVE-2010-0457 Public exploit
SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2010-0458 Public exploit
Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2010-0390 Public exploit
Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is n…
-
Unscored —
stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in s…
-
Unscored —CVE-2010-0388 Public exploit
Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows …
-
Unscored —CVE-2010-0387 Public exploit
Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update …
-
High 8.1
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…
-
Unscored —
The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API funct…
-
Unscored —CVE-2010-0380 Public exploit
install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restricti…
-
Unscored —CVE-2010-0376 Public exploit
Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows r…
-
Unscored —CVE-2010-0375 Public exploit
SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attacke…
-
Unscored —CVE-2010-0374 Public exploit
Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote a…
-
Unscored —CVE-2010-0373 Public exploit
SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-0372 Public exploit
SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to…
-
Unscored —CVE-2010-0371 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inje…
-
Unscored —CVE-2010-0365 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows r…
-
Unscored —CVE-2010-0366 Public exploit
Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Scr…
-
Unscored —CVE-2010-0367 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, a…
-
Unscored —CVE-2010-0364 Public exploit
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitra…
-
High 7.8
The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…
KEV Mar 3, 2022 -
Unscored —
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to e…
-
Unscored —
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Updat…
-
Unscored —
Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2009-4141 Public exploit
Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 all…
-
Unscored —CVE-2009-4618 Public exploit
Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-4621 Public exploit
SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute ar…
-
Unscored —CVE-2009-4624 Public exploit
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arb…
-
Unscored —CVE-2009-4615 Public exploit
SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-4620 Public exploit
SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute ar…
-
Unscored —CVE-2009-4627 Public exploit
Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attack…
-
Unscored —CVE-2009-4616 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in MYRE Holiday Rental Manager allows remote attackers to inject…
-
Unscored —CVE-2009-4617 Public exploit
Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attacke…
-
Unscored —CVE-2009-4628 Public exploit
SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attack…
-
Unscored —CVE-2009-4622 Public exploit
PHP remote file inclusion vulnerability in admin/admin_news_bot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows…
-
Unscored —CVE-2009-4625 Public exploit
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pr…