Skip to content
OpenAdvisories

Archive

March 2010

Vulnerabilities first published in this month (UTC), newest first.

← February 2010 2010 / March April 2010 →
  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128
All Critical High Medium Low Exploited only Public exploit

513 results · Feed

  • Unscored —
    CVE-2010-0969

    Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a d…

    unbound Debian
  • Unscored —
    CVE-2010-0967 Public exploit

    Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magic_quotes_gpc is disabled, allow remote at…

  • Unscored —
    CVE-2010-0972 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2010-0963

    Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers …

  • Unscored —
    CVE-2009-4698 Public exploit

    Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute…

  • Unscored —
    CVE-2009-4701

    SQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows remote attackers to e…

  • Unscored —
    CVE-2009-4700 Public exploit

    Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2009-4715

    Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject …

  • Unscored —
    CVE-2009-4718

    SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-4713 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attacke…

  • Unscored —
    CVE-2009-4717 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2009-4706

    Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote att…

  • Unscored —
    CVE-2009-4704

    Unspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attacker…

  • Unscored —
    CVE-2009-4714 Public exploit

    Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-4712

    SQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0 allows remote attacker…

  • Unscored —
    CVE-2009-4709

    SQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0.7.2 for TYPO3 allows …

  • Unscored —
    CVE-2009-4708

    SQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier …

  • Unscored —
    CVE-2009-4702

    SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers t…

  • Unscored —
    CVE-2009-4705

    Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows …

  • Unscored —
    CVE-2009-4716

    Cross-site scripting (XSS) vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-4711

    SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execu…

  • Unscored —
    CVE-2009-4703

    SQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier for TYPO3 allows remo…

  • Unscored —
    CVE-2009-4707

    Cross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0…

  • Unscored —
    CVE-2009-4699 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2009-4710

    SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 al…

  • Unscored —
    CVE-2010-0051

    WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows re…

  • Unscored —
    CVE-2010-0052

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2010-0053

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2010-0050 Public exploit EPSS 12%

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2010-0054

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2010-0049 Public exploit EPSS 11%

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2010-0046

    The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 4.0.5 allows remote attackers to execu…

  • Unscored —
    CVE-2010-0044

    PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, …

    libpoe-component-pubsub-perl libipc-pubsub-perl Ubuntu
  • High 8.8
    CVE-2010-0048

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • High 8.8
    CVE-2010-0047

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2010-0041

    ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated …

  • Unscored —
    CVE-2010-0042

    ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated …

  • Unscored —
    CVE-2010-0624

    Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar befo…

    tar cpio Debian
  • Unscored —
    CVE-2010-0122 Public exploit

    Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-0396

    Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify…

    dpkg Debian