Skip to content
OpenAdvisories

Archive

16 April 2010

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-1465 Public exploit EPSS 31%

    Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-1466 Public exploit

    Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitra…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbit…

  • Unscored —

    GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation…

  • Unscored —
    CVE-2010-1467 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitra…

  • Unscored —

    Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-a…

  • Unscored —

    core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference a…

  • Unscored —
    CVE-2010-1461 Public exploit Scanner template

    Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attac…

  • Unscored —

    Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's …

  • Unscored —

    The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current wo…

  • Unscored —

    Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parame…

  • Unscored —

    Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-as…

  • Unscored —
    CVE-2010-1460 Public exploit

    The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt s…