Skip to content
OpenAdvisories

Archive

26 February 2010

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2010-0721 Public exploit

    SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-0725 Public exploit

    Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-0723 Public exploit

    SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-0720 Public exploit

    SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-0722 Public exploit

    SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2010-0724 Public exploit

    SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-0718 Public exploit

    Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2010-0714 Public exploit

    Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), …

  • Unscored —
    CVE-2009-4655 Public exploit EPSS 51%

    The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote at…

  • Unscored —
    CVE-2009-4654 Public exploit

    Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated us…

  • Unscored —
    CVE-2009-4653 Public exploit EPSS 13%

    Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated us…

  • Unscored —
    CVE-2010-0712 Public exploit

    Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before…

  • Unscored —
    CVE-2010-0713 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote…