Skip to content
OpenAdvisories

Archive

February 2010

Vulnerabilities first published in this month (UTC), newest first.

308 results · Feed

  • Unscored —
    CVE-2010-0680 Public exploit

    Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2010-0681 Public exploit

    ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attac…

  • Unscored —
    CVE-2010-0679 Public exploit EPSS 35%

    Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos C…

  • Unscored —
    CVE-2009-4650 Public exploit

    SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows r…

  • Unscored —
    CVE-2009-4651 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and …

  • Unscored —
    CVE-2010-0674 Public exploit

    StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote a…

  • Unscored —
    CVE-2010-0671 Public exploit

    SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote …

  • Unscored —
    CVE-2010-0675 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2010-0673 Public exploit

    SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress…

  • Unscored —
    CVE-2010-0672 Public exploit

    SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web sc…

  • Unscored —

    Unspecified vulnerability in the IP-Tech JQuarks (com_jquarks) Component before 0.2.4 for Joomla! allows attackers to o…

  • Unscored —

    openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain p…

  • Unscored —

    drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memo…

  • Unscored —

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers…

  • Unscored —

    Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to byp…

  • Unscored —

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonk…

  • High 7.8
    CVE-2010-0188 Exploited · Ransomware Public exploit EPSS 88%

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…

    KEV Mar 3, 2022
  • Unscored —

    Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the a…

  • Unscored —

    The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3,…

  • Unscored —

    Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderb…

  • Unscored —

    Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.4…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.4…

  • Unscored —

    Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a …

  • Unscored —
    CVE-2010-0665 Public exploit

    JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, whi…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.4…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.4…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.4…

  • Unscored —

    The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x …

  • Unscored —

    The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 760…

  • Unscored —
    CVE-2010-0108 Public exploit EPSS 19%

    Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiV…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.4…

  • Unscored —

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.3…

  • Unscored —
    CVE-2009-4645 Public exploit

    Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_…

  • Unscored —

    Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance all…

  • Unscored —
    CVE-2009-4648 Public exploit

    Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arg…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Accellion Secure File Transfer Appliance before 7_0_296 allows remote attac…

  • Unscored —

    Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restri…