Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
513 results · Feed
-
Unscored —
Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unkn…
-
Unscored —CVE-2010-1117 EPSS 14%
Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x through 6.x-1.2 for Dr…
-
Unscored —
LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers…
-
Unscored —
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote at…
-
Unscored —CVE-2010-1111 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrar…
-
Unscored —CVE-2010-1109 Public exploit
Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic_quotes_gpc is disabled, allow remote …
-
Unscored —CVE-2010-1114 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exe…
-
Medium —
Moderate severity vulnerability that affects Zope2
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messag…
-
Unscored —CVE-2010-1106 Public exploit
PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for …
-
Unscored —
Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories …
-
Unscored —CVE-2010-1113 Public exploit
Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attacke…
-
Unscored —CVE-2010-1112 Public exploit
Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE compon…
-
Unscored —CVE-2010-0619 Public exploit
Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE compone…
-
Unscored —
Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via …
-
Unscored —
Integer overflow in Apple Safari allows remote attackers to bypass intended port restrictions on outbound TCP connectio…
-
Unscored —
Integer overflow in Alexander Clauss iCab allows remote attackers to bypass intended port restrictions on outbound TCP …
-
Unscored —
Integer overflow in OmniWeb allows remote attackers to bypass intended port restrictions on outbound TCP connections vi…
-
Unscored —
Integer overflow in Stainless allows remote attackers to bypass intended port restrictions on outbound TCP connections …
-
Unscored —CVE-2009-2907 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Managem…
-
Unscored —CVE-2010-1090 Public exploit
SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2010-1098 EPSS 15%
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, …
-
Unscored —CVE-2010-1095 Public exploit
Cross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking Requirements & Use Cases (TRUC) 0…
-
Unscored —CVE-2010-1091 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitr…
-
Unscored —CVE-2010-1092 Public exploit
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers t…
-
Unscored —
Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to exec…
-
Unscored —CVE-2010-1093 Public exploit
SQL injection vulnerability in rss.php in 1024 CMS 2.1.1, when magic_quotes_gpc is disabled, allows remote attackers to…
-
Unscored —CVE-2010-1094 Public exploit
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQ…
-
Unscored —
include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote attackers to bypass a…
-
Unscored —CVE-2010-1089 Public exploit
SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL …
-
Unscored —
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle ce…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, fo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web…
-
Unscored —
Multiple directory traversal vulnerabilities in OI.Blogs 1.0.0, when magic_quotes_gpc is disabled, allow remote attacke…
-
Unscored —
SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL c…