Archive
7 April 2010
Vulnerabilities first published on this day (UTC), newest first.
11 results · Feed
-
Unscored —CVE-2008-7254 Public exploit
Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, …
-
Unscored —CVE-2010-1300 Public exploit
SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbi…
-
Unscored —CVE-2010-1301 Public exploit
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is d…
-
Unscored —
Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! …
-
Unscored —
Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 …
-
Unscored —
SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate username…
-
Unscored —CVE-2010-1223 EPSS 17%
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malfo…
-
Unscored —
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive…
-
Unscored —CVE-2010-1186 Public exploit
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress …