Archive
January 2010
Vulnerabilities first published in this month (UTC), newest first.
319 results · Feed
-
Unscored —CVE-2010-0365 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows r…
-
Unscored —CVE-2010-0366 Public exploit
Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Scr…
-
Unscored —CVE-2010-0367 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, a…
-
Unscored —CVE-2010-0364 Public exploit
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitra…
-
High 7.8
The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…
KEV Mar 3, 2022 -
Unscored —
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code…
-
Unscored —
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2009-4000 EPSS 20%
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attacker…
-
Unscored —
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to e…
-
Unscored —
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Updat…
-
Unscored —
Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of servi…
-
Unscored —
Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of…
-
Unscored —
Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote att…
-
High 8.8
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or c…
-
Unscored —
Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, a…
-
High 7.8
Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, all…
-
High —
phpMyAdmin unsafely handles temporary files
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
-
Unscored —
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which…
-
Unscored —
net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4…
-
Unscored —
scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the valu…
-
Unscored —
Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code v…
-
Unscored —CVE-2009-4141 Public exploit
Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 all…
-
Unscored —
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote at…
-
Unscored —CVE-2009-4618 Public exploit
Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-4621 Public exploit
SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute ar…
-
Unscored —CVE-2009-4624 Public exploit
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arb…
-
Unscored —CVE-2009-4615 Public exploit
SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-4620 Public exploit
SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute ar…
-
Unscored —
SQL injection vulnerability in the Lucy Games (com_lucygames) component 1.5.4 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2009-4627 Public exploit
Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attack…
-
Unscored —CVE-2009-4616 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in MYRE Holiday Rental Manager allows remote attackers to inject…
-
Unscored —CVE-2009-4617 Public exploit
Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attacke…
-
Unscored —CVE-2009-4628 Public exploit
SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attack…
-
Unscored —CVE-2009-4622 Public exploit
PHP remote file inclusion vulnerability in admin/admin_news_bot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows…
-
Unscored —CVE-2009-4625 Public exploit
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pr…
-
Unscored —CVE-2009-4614 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2009-4626 Public exploit
Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitra…