Skip to content
OpenAdvisories

Archive

16 March 2010

Vulnerabilities first published on this day (UTC), newest first.

← February 2010 2010 / March /16 April 2010 →
  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2010-0397 Public exploit EPSS 12%

    The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xm…

  • Unscored —
    CVE-2010-0983 Public exploit

    PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is …

  • Unscored —
    CVE-2010-0729

    A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local use…

  • Unscored —
    CVE-2010-0981 Public exploit

    SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-0793

    Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execu…

    barnowl Debian
  • Unscored —
    CVE-2010-0984 Public exploit

    Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which a…

  • Unscored —
    CVE-2010-0976 Public exploit

    Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attacker…

  • Unscored —
    CVE-2010-0977

    PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2010-0727

    The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kern…

  • Unscored —
    CVE-2010-0979

    Cross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery (ODIG) 1.1 allows remote atta…

  • Unscored —
    CVE-2010-0978 Public exploit

    KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, whic…

  • Unscored —
    CVE-2010-0982 Public exploit Scanner template

    Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attack…

  • Unscored —
    CVE-2010-0980 Public exploit

    SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2010-0985 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote att…

  • Unscored —
    CVE-2007-6733

    The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are…

  • Unscored —
    CVE-2010-0965

    Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2010-0970 Public exploit

    SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-0974 Public exploit

    Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-0968 Public exploit

    SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-0973 Public exploit

    SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to…

  • Unscored —
    CVE-2010-0966 Public exploit

    PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is …

  • Unscored —
    CVE-2010-0964 Public exploit

    SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-0971 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor p…

  • Unscored —
    CVE-2010-0975 Public exploit

    PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2010-0969

    Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a d…

    unbound Debian
  • Unscored —
    CVE-2010-0967 Public exploit

    Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magic_quotes_gpc is disabled, allow remote at…

  • Unscored —
    CVE-2010-0972 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2010-0963

    Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers …