23 April 2010

28 results · Feed

• Unscored —
  CVE-2010-1498 Public exploit

  Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands …

  Apr 23, 2010
• Unscored —
  CVE-2010-1505

  Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unk…

  Apr 23, 2010
• Unscored —
  CVE-2010-1496 Public exploit

  SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execu…

  Apr 23, 2010
• Unscored —
  CVE-2010-1035

  Multiple unspecified vulnerabilities in HP Virtual Machine Manager (VMM) before 6.0 allow remote authenticated users to…

  Apr 23, 2010
• Unscored —
  CVE-2010-1495 Public exploit Scanner template EPSS 18%

  Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to re…

  Apr 23, 2010
• Unscored —
  CVE-2010-1504

  Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitra…

  Apr 23, 2010
• Unscored —
  CVE-2010-1493 Public exploit

  SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2010-1499 Public exploit

  SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL comma…

  Apr 23, 2010
• Unscored —
  CVE-2010-1506

  The Google V8 bindings in Google Chrome before 4.1.249.1059 allow attackers to cause a denial of service (memory corrup…

  Apr 23, 2010
• Unscored —
  CVE-2010-1497 Public exploit

  Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject …

  Apr 23, 2010
• Unscored —
  CVE-2010-1034

  Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 before 6.0.0-95 on Linux, and 6.0 before 6.0.0.96 …

  Apr 23, 2010
• Unscored —
  CVE-2010-1502

  Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vector…

  Apr 23, 2010
• Medium —
  CVE-2010-1157 Public exploit EPSS 53%

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

  Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…

  org.apache.tomcat:tomcat Maven
  Apr 23, 2010
• Unscored —
  CVE-2010-1491 Public exploit Scanner template EPSS 14%

  Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2010-1503

  Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitra…

  Apr 23, 2010
• Unscored —
  CVE-2010-1492

  Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary fil…

  Apr 23, 2010
• Unscored —
  CVE-2010-1494 Public exploit Scanner template EPSS 17%

  Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to r…

  Apr 23, 2010
• Unscored —
  CVE-2010-1500

  Google Chrome before 4.1.249.1059 does not properly support forms, which has unknown impact and attack vectors, related…

  Apr 23, 2010
• Unscored —
  CVE-2009-4801 Public exploit

  EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via r…

  Apr 23, 2010
• Unscored —
  CVE-2009-4806 Public exploit

  admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which…

  Apr 23, 2010
• Unscored —
  CVE-2009-4802

  SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2009-4807 Public exploit

  Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary…

  Apr 23, 2010
• Unscored —
  CVE-2009-4804

  Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Exp…

  Apr 23, 2010
• Unscored —
  CVE-2009-4805 Public exploit

  Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2009-4810

  The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where r…

  samhain Debian
  Apr 23, 2010
• High —
  CVE-2009-4803

  Accessibility Glossary (a21glossary) SQL injection vulnerability

  SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  wapplersystems/a21glossary svewap/a21glossary Packagist
  Apr 23, 2010
• Unscored —
  CVE-2009-4809 Public exploit

  Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to…

  Apr 23, 2010
• Unscored —
  CVE-2009-4808 Public exploit

  admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrati…

  Apr 23, 2010