Skip to content
OpenAdvisories

Archive

22 April 2010

Vulnerabilities first published on this day (UTC), newest first.

← March 2010 2010 / April /22 May 2010 →
  1. 148
  2. 2 
  3. 3 
  4. 4 
  5. 543
  6. 624
  7. 711
  8. 815
  9. 918
  10. 10 
  11. 11 
  12. 1221
  13. 1366
  14. 1440
  15. 1510
  16. 1614
  17. 17 
  18. 18 
  19. 1913
  20. 2027
  21. 2119
  22. 2216
  23. 2328
  24. 24 
  25. 25 
  26. 2617
  27. 2724
  28. 2818
  29. 2928
  30. 3016
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Unscored —
    CVE-2010-1486 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to…

  • Unscored —
    CVE-2010-1320 Public exploit EPSS 12%

    Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1…

    krb5 Debian
  • Unscored —
    CVE-2009-4800 Public exploit

    Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitra…

  • Unscored —
    CVE-2009-4792 Public exploit

    SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to exe…

  • Unscored —
    CVE-2009-4794 Public exploit

    Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2009-4790 Public exploit

    Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modi…

  • Unscored —
    CVE-2009-4791 Public exploit

    Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute …

  • Unscored —
    CVE-2009-4798 Public exploit

    Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2009-4799 Public exploit

    Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote at…

  • Unscored —
    CVE-2009-4795 Public exploit

    Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow re…

  • Unscored —
    CVE-2009-4796 Public exploit

    Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php i…

  • Unscored —
    CVE-2009-4797 Public exploit

    SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-4793 Public exploit

    Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenti…