Skip to content
OpenAdvisories

Archive

25 February 2010

Vulnerabilities first published on this day (UTC), newest first.

← January 2010 2010 / February /25 March 2010 →
  1. 1 
  2. 212
  3. 312
  4. 417
  5. 517
  6. 6 
  7. 7 
  8. 810
  9. 92
  10. 1036
  11. 1121
  12. 1215
  13. 13 
  14. 14 
  15. 1512
  16. 165
  17. 174
  18. 1825
  19. 1917
  20. 20 
  21. 219
  22. 2216
  23. 2322
  24. 246
  25. 2518
  26. 2623
  27. 279
  28. 28 
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2010-0710

    SQL injection vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows r…

  • Unscored —
    CVE-2010-0709 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authen…

  • Unscored —
    CVE-2010-0711 Public exploit

    Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly othe…

  • Unscored —
    CVE-2010-0424

    The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to cha…

  • Unscored —
    CVE-2010-0683

    Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used,…

  • Unscored —
    CVE-2010-0427

    sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allow…

    sudo Debian
  • Unscored —
    CVE-2010-0708

    Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, …

  • Unscored —
    CVE-2010-0011

    The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows r…

  • Unscored —
    CVE-2003-1589

    Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows atta…

  • Unscored —
    CVE-2003-1590

    Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to…

  • Unscored —
    CVE-2010-0707 Public exploit

    Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attac…

  • Unscored —
    CVE-2010-0706 Public exploit

    Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows r…

  • Unscored —
    CVE-2010-0705 Public exploit

    Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly…

  • Unscored —
    CVE-2010-0412

    stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers …

    systemtap Debian
  • Unscored —
    CVE-2010-0119

    Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows …

  • Unscored —
    CVE-2010-0118

    Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary file…

  • Unscored —
    CVE-2010-0620 Public exploit EPSS 19%

    Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 a…

  • Unscored —
    CVE-2010-0704

    Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows re…