Archive
February 2010
Vulnerabilities first published in this month (UTC), newest first.
99 results · Clear filters · Feed
-
Unscored —CVE-2010-0690 Public exploit
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arb…
-
Unscored —CVE-2010-0678 Public exploit
PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earli…
-
Unscored —CVE-2010-0677 Public exploit
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attacker…
-
Unscored —CVE-2010-0680 Public exploit
Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary …
-
Unscored —CVE-2010-0681 Public exploit
ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos C…
-
Unscored —CVE-2009-4650 Public exploit
SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows r…
-
Unscored —CVE-2009-4651 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and …
-
Unscored —CVE-2010-0674 Public exploit
StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote a…
-
Unscored —CVE-2010-0671 Public exploit
SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2010-0675 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject ar…
-
Unscored —CVE-2010-0673 Public exploit
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress…
-
Unscored —CVE-2010-0672 Public exploit
SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands vi…
-
High 7.8
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…
KEV Mar 3, 2022 -
Unscored —CVE-2010-0665 Public exploit
JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, whi…
-
Unscored —
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiV…
-
Unscored —CVE-2009-4645 Public exploit
Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_…
-
Unscored —CVE-2009-4648 Public exploit
Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arg…
-
Unscored —
Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix…
-
Unscored —CVE-2010-0655 Public exploit
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial…
-
Unscored —CVE-2010-0641 Public exploit
Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) …
-
Unscored —CVE-2010-0307 Public exploit
The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ens…
-
Unscored —CVE-2010-0642 Public exploit
Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded chara…
-
Unscored —CVE-2010-0415 Public exploit
The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which a…
-
Unscored —
Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allow…
-
Unscored —
Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service…
-
Unscored —
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-1…
-
Medium 6.5
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Servic…
KEV Mar 7, 2022 -
Unscored —CVE-2010-0631 Public exploit
Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allo…
-
Unscored —CVE-2010-0630 Public exploit
SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-0632 Public exploit
SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote a…
-
Unscored —CVE-2001-1586 Public exploit
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary pro…
-
Unscored —CVE-2010-0614 Public exploit
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2010-0610 Public exploit
Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to…
-
Unscored —CVE-2010-0605 Public exploit
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "St…
-
Unscored —CVE-2010-0608 Public exploit
SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2010-0611 Public exploit
Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to exec…
-
Unscored —CVE-2010-0607 Public exploit
Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote at…
-
Unscored —CVE-2010-0233 Public exploit
Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1…
-
Unscored —
Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB ser…