Archive
February 2010
Vulnerabilities first published in this month (UTC), newest first.
99 results · Clear filters · Feed
-
Unscored —CVE-2010-0760 Public exploit
Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote att…
-
Unscored —CVE-2010-0755 Public exploit
PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute a…
-
Unscored —CVE-2010-0756 Public exploit
Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jses…
-
Unscored —
Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Des…
-
Unscored —CVE-2010-0758 Public exploit
SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2010-0754 Public exploit
Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows rem…
-
Unscored —CVE-2010-0753 Public exploit
SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2010-0757 Public exploit
Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to ex…
-
Unscored —CVE-2010-0721 Public exploit
SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2010-0725 Public exploit
Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2010-0723 Public exploit
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2010-0720 Public exploit
SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2010-0722 Public exploit
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2010-0724 Public exploit
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-0718 Public exploit
Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2010-0714 Public exploit
Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), …
-
Unscored —
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote at…
-
Unscored —CVE-2009-4654 Public exploit
Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated us…
-
Unscored —
Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated us…
-
Unscored —CVE-2010-0712 Public exploit
Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before…
-
Unscored —CVE-2010-0713 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote…
-
Unscored —CVE-2010-0709 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authen…
-
Unscored —CVE-2010-0711 Public exploit
Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly othe…
-
Unscored —CVE-2010-0707 Public exploit
Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attac…
-
Unscored —CVE-2010-0706 Public exploit
Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows r…
-
Unscored —CVE-2010-0705 Public exploit
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly…
-
Unscored —
Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 a…
-
Unscored —CVE-2010-0426 Public exploit
sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name…
-
Unscored —CVE-2010-0700 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2010-0703 Public exploit
Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2010-0698 Public exploit
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbit…
-
Unscored —CVE-2010-0701 Public exploit
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute a…
-
Unscored —
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct reques…
-
Unscored —CVE-2010-0702 Public exploit
SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to …
-
Unscored —CVE-2009-3036 Public exploit
Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote …
-
Unscored —CVE-2010-0691 Public exploit
SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-0694 Public exploit
SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote at…
-
Unscored —CVE-2010-0693 Public exploit
SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute…
-
Unscored —
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 throu…
-
Unscored —CVE-2010-0695 Public exploit
Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary we…