Skip to content
OpenAdvisories

Archive

March 2010

Vulnerabilities first published in this month (UTC), newest first.

← February 2010 2010 / March April 2010 →
  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128
All Critical High Medium Low Exploited only Public exploit

513 results · Feed

  • Unscored —
    CVE-2010-1077 Public exploit

    Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers…

  • Unscored —
    CVE-2010-1078 Public exploit

    SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-1074

    Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attack…

  • Unscored —
    CVE-2010-1073 Public exploit

    SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-1071 Public exploit

    SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-1070 Public exploit

    SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-1069 Public exploit

    SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-1068

    Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers …

  • Unscored —
    CVE-2010-1065 Public exploit

    Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control…

  • Unscored —
    CVE-2010-1040

    The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 thro…

  • Unscored —
    CVE-2010-1072

    Cross-site scripting (XSS) vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2010-1067 Public exploit

    E-membres 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2010-1064 Public exploit

    Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2010-1066 Public exploit

    AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whi…

  • Unscored —
    CVE-2009-4736

    Cross-site scripting (XSS) vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2010-1059

    Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gp…

  • Unscored —
    CVE-2010-1058 Public exploit

    Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_…

  • Unscored —
    CVE-2010-1055 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and reg…

  • Unscored —
    CVE-2010-1060 Public exploit

    Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disab…

  • Unscored —
    CVE-2010-1056 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remo…

  • Unscored —
    CVE-2010-1063

    Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is di…

  • Unscored —
    CVE-2010-1061

    Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote…

  • Unscored —
    CVE-2010-1057 Public exploit

    Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is d…

  • Unscored —
    CVE-2010-1054 Public exploit

    Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP p…

  • Unscored —
    CVE-2010-1062 Public exploit

    Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when mag…

  • Unscored —
    CVE-2010-1047 Public exploit

    SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-1043 Public exploit

    Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2010-1049 Public exploit

    Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-1048 Public exploit

    Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject ar…

  • Unscored —
    CVE-2010-1053 Public exploit

    Multiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when magic_quotes_gpc is disabled, allow r…

  • Unscored —
    CVE-2010-1045 Public exploit

    SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to…

  • Unscored —
    CVE-2010-1051 Public exploit

    Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2010-1044 Public exploit

    SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-1046 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arb…

  • Unscored —
    CVE-2010-1052 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2010-1050 Public exploit

    SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2010-0163

    Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs …

  • Unscored —
    CVE-2010-0161

    The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey …

  • Unscored —
    CVE-2010-1041

    Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Man…

  • Unscored —
    CVE-2010-1042 Public exploit EPSS 10%

    Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cau…