Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —CVE-2010-0166 Public exploit
The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 b…
-
Unscored —
The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in…
-
Unscored —
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari bef…
-
Unscored —CVE-2010-1111 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrar…
-
Unscored —CVE-2010-1109 Public exploit
Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic_quotes_gpc is disabled, allow remote …
-
Unscored —CVE-2010-1114 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exe…
-
Unscored —CVE-2010-1106 Public exploit
PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execu…
-
Unscored —CVE-2010-1113 Public exploit
Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attacke…
-
Unscored —CVE-2010-1112 Public exploit
Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2010-0619 Public exploit
Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE compone…
-
Unscored —CVE-2009-2907 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Managem…
-
Unscored —CVE-2010-1090 Public exploit
SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2010-1095 Public exploit
Cross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking Requirements & Use Cases (TRUC) 0…
-
Unscored —CVE-2010-1091 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitr…
-
Unscored —CVE-2010-1092 Public exploit
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers t…
-
Unscored —CVE-2010-1093 Public exploit
SQL injection vulnerability in rss.php in 1024 CMS 2.1.1, when magic_quotes_gpc is disabled, allows remote attackers to…
-
Unscored —CVE-2010-1094 Public exploit
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-1089 Public exploit
SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL …
-
Unscored —
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle ce…
-
Unscored —
Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, fo…
-
Unscored —CVE-2010-1077 Public exploit
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers…
-
Unscored —CVE-2010-1078 Public exploit
SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbi…
-
Unscored —CVE-2010-1073 Public exploit
SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to …
-
Unscored —CVE-2010-1071 Public exploit
SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2010-1070 Public exploit
SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary…
-
Unscored —CVE-2010-1069 Public exploit
SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2010-1065 Public exploit
Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control…
-
Unscored —CVE-2010-1067 Public exploit
E-membres 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…
-
Unscored —CVE-2010-1064 Public exploit
Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2010-1066 Public exploit
AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whi…
-
Unscored —CVE-2010-1058 Public exploit
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_…
-
Unscored —CVE-2010-1055 Public exploit
Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and reg…
-
Unscored —CVE-2010-1060 Public exploit
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disab…
-
Unscored —
Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remo…
-
Unscored —CVE-2010-1057 Public exploit
Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is d…
-
Unscored —CVE-2010-1054 Public exploit
Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP p…
-
Unscored —CVE-2010-1062 Public exploit
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when mag…
-
Unscored —CVE-2010-1047 Public exploit
SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2010-1043 Public exploit
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2010-1049 Public exploit
Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands…