Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
513 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2010-0955 Public exploit
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote …
-
Unscored —CVE-2010-0953 Public exploit
Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2010-0948 Public exploit
SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers t…
-
Unscored —CVE-2010-0951 Public exploit
SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2010-0958 Public exploit
Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc i…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web s…
-
Unscored —
SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2010-0952 Public exploit
SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to e…
-
Unscored —
The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allo…
-
Unscored —
UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Ar…
-
Unscored —
smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, whic…
-
Unscored —
The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitra…
-
Unscored —
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writabl…
-
Unscored —
sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged …
-
Unscored —CVE-2010-0939 Public exploit
Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2010-0946 Public exploit
SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Jo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2010-0945 Public exploit
SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remot…
-
Unscored —
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject…
-
Unscored —
Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors.
-
Unscored —
Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers …
-
Unscored —CVE-2010-0936 Public exploit
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allo…
-
Unscored —
Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allow…
-
Unscored —CVE-2009-4678 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary…
-
Unscored —
The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon c…
-
Unscored —
The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an envir…
-
Unscored —
Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gai…
-
Unscored —
Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain sup…
-
Unscored —
The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon c…
-
Unscored —
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and …
-
Unscored —
The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute…
-
Unscored —
Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files…
-
Unscored —
Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which m…
-
Unscored —CVE-2010-0434 EPSS 18%
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded M…