Skip to content
OpenAdvisories

Archive

7 April 2010

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —
    CVE-2008-7254 Public exploit

    Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, …

  • Unscored —
    CVE-2010-1300 Public exploit

    SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-1301 Public exploit

    SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-1299 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is d…

  • Unscored —
    CVE-2010-1302 Public exploit Scanner template

    Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! …

  • Unscored —

    Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 …

  • Unscored —

    SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate username…

  • Unscored —
    CVE-2010-1223 EPSS 17%

    Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malfo…

  • Unscored —

    CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive…

  • Unscored —
    CVE-2010-1186 Public exploit

    Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress …