Skip to content
OpenAdvisories

Archive

March 2010

Vulnerabilities first published in this month (UTC), newest first.

← February 2010 2010 / March April 2010 →
  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128
All Critical High Medium Low Exploited only Public exploit

513 results · Feed

  • Unscored —
    CVE-2010-1183 Public exploit

    Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink …

  • Unscored —
    CVE-2010-1182

    Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server (WAS) 7.0.x befo…

  • High 7.5
    CVE-2009-4762

    MoinMoin Improper Access Control vulnerability

    MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulner…

    moin PyPI
  • Unscored —
    CVE-2010-1174 Public exploit

    Cisco TFTP Server 1.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) read (aka R…

  • Unscored —
    CVE-2010-1180 Public exploit

    Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2010-1177 Public exploit

    Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2010-1175 Public exploit EPSS 14%

    Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified im…

  • Unscored —
    CVE-2010-1179 Public exploit

    Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2010-1176 Public exploit

    Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2010-1178

    Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2010-1181

    Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2010-0452

    Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercu…

  • Unscored —
    CVE-2009-4755 Public exploit

    Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2009-4754 Public exploit

    Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long s…

  • Unscored —
    CVE-2009-4758 Public exploit

    Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2009-4753 Public exploit

    Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attacke…

  • Unscored —
    CVE-2009-4759 Public exploit

    Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) …

  • Unscored —
    CVE-2009-4756 Public exploit

    Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to exec…

  • Unscored —
    CVE-2009-4757 Public exploit

    Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (app…

  • Unscored —
    CVE-2009-4760 Public exploit

    Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2009-4761 Public exploit

    Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long s…

  • Unscored —
    CVE-2010-1133

    Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2010-1135

    The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which al…

  • Unscored —
    CVE-2010-1134

    SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remo…

  • Unscored —
    CVE-2010-1136

    The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrict…

  • Unscored —
    CVE-2010-1131 Public exploit

    JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2010-1132 Public exploit

    The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allo…

    spamass-milter Debian
  • Unscored —
    CVE-2010-1130 Public exploit

    session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) character…

  • Unscored —
    CVE-2010-1126

    The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden…

  • Unscored —
    CVE-2010-1125

    The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, …

  • Unscored —
    CVE-2010-1129

    The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (…

  • Unscored —
    CVE-2010-1127 EPSS 19%

    Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement m…

  • Unscored —
    CVE-2010-1128 Public exploit

    The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easi…

  • Unscored —
    CVE-2009-4742 Public exploit

    Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (…

  • Unscored —
    CVE-2009-4752 Public exploit

    PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute…

  • Unscored —
    CVE-2009-4751 Public exploit

    SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-4747 Public exploit

    PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.0…

  • Unscored —
    CVE-2009-4744

    Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers …

  • Unscored —
    CVE-2009-4741

    Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact…

  • Unscored —
    CVE-2009-4740

    Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecifie…