Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —CVE-2010-0958 Public exploit
Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc i…
-
Unscored —CVE-2010-0952 Public exploit
SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to e…
-
Unscored —
UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Ar…
-
Unscored —
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writabl…
-
Unscored —CVE-2010-0939 Public exploit
Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2010-0946 Public exploit
SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Jo…
-
Unscored —CVE-2010-0945 Public exploit
SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remot…
-
Unscored —
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to …
-
Unscored —
Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers …
-
Unscored —CVE-2010-0936 Public exploit
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allo…
-
Unscored —
Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to…
-
Unscored —
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allow…
-
Unscored —CVE-2009-4678 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary…
-
Unscored —
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and …
-
Unscored —CVE-2009-4676 Public exploit
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute…
-
Unscored —CVE-2009-4672 Public exploit
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to inc…
-
Unscored —CVE-2009-4671 Public exploit
Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by se…
-
Unscored —CVE-2009-4674 Public exploit
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to ch…
-
Medium —CVE-2009-4665 Public exploit
CuteSoft CuteEditor Path Traversal vulnerability
Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
-
Unscored —CVE-2009-4670 Public exploit
admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete ar…
-
Unscored —CVE-2009-4667 Public exploit
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL com…
-
Unscored —CVE-2009-4673 Public exploit
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-4668 Public exploit
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute…
-
Unscored —CVE-2009-4675 Public exploit
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrativ…
-
Unscored —CVE-2009-4666 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute a…
-
Unscored —CVE-2009-4669 Public exploit
Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portma…
-
Unscored —
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portm…
-
Unscored —
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-a…
-
Unscored —CVE-2009-4658 Public exploit
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port as…
-
Unscored —CVE-2009-4659 Public exploit
Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial …
-
Unscored —
Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-4657 Public exploit
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter appli…
-
Unscored —CVE-2009-4661 Public exploit
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial …
-
Unscored —
Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to…
-
Unscored —
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, whe…
-
Unscored —CVE-2010-0799 Public exploit
Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to rea…
-
Unscored —CVE-2010-0801 Public exploit
Directory traversal vulnerability in the AutartiTarot (com_autartitarot) component 1.0.3 for Joomla! allows remote auth…
-
Unscored —CVE-2010-0800 Public exploit
SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com_dms) component 2.5.1 for Joomla! all…
-
Unscored —CVE-2010-0802 Public exploit
SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote …