Skip to content
OpenAdvisories

Archive

23 February 2010

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —
    CVE-2010-0700 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2010-0703 Public exploit

    Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary…

  • Unscored —

    Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject ar…

  • Unscored —
    CVE-2010-0698 Public exploit

    SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-0701 Public exploit

    SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute a…

  • Unscored —

    Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated us…

  • Unscored —

    Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus,…

  • Unscored —

    A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Ado…

  • Unscored —
    CVE-2010-0682 Public exploit EPSS 10%

    WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct reques…

  • Unscored —

    SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.2…

  • Unscored —
    CVE-2010-0702 Public exploit

    SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to …

  • Unscored —

    The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 …

  • Unscored —
    CVE-2009-3036 Public exploit

    Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote …

  • Unscored —
    CVE-2010-0691 Public exploit

    SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-0694 Public exploit

    SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote at…

  • Unscored —

    SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! all…

  • Unscored —
    CVE-2010-0693 Public exploit

    SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute…

  • Unscored —
    CVE-2010-0696 Public exploit Scanner template EPSS 28%

    Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 throu…

  • Unscored —
    CVE-2010-0695 Public exploit

    Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2010-0690 Public exploit

    SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arb…