23 April 2010

15 results · Clear filters · Feed

• Unscored —
  CVE-2010-1498 Public exploit

  Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands …

  Apr 23, 2010
• Unscored —
  CVE-2010-1496 Public exploit

  SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execu…

  Apr 23, 2010
• Unscored —
  CVE-2010-1495 Public exploit Scanner template EPSS 18%

  Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to re…

  Apr 23, 2010
• Unscored —
  CVE-2010-1493 Public exploit

  SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2010-1499 Public exploit

  SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL comma…

  Apr 23, 2010
• Unscored —
  CVE-2010-1497 Public exploit

  Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject …

  Apr 23, 2010
• Medium —
  CVE-2010-1157 Public exploit EPSS 53%

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

  Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…

  org.apache.tomcat:tomcat Maven
  Apr 23, 2010
• Unscored —
  CVE-2010-1491 Public exploit Scanner template EPSS 14%

  Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2010-1494 Public exploit Scanner template EPSS 17%

  Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to r…

  Apr 23, 2010
• Unscored —
  CVE-2009-4801 Public exploit

  EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via r…

  Apr 23, 2010
• Unscored —
  CVE-2009-4806 Public exploit

  admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which…

  Apr 23, 2010
• Unscored —
  CVE-2009-4807 Public exploit

  Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary…

  Apr 23, 2010
• Unscored —
  CVE-2009-4805 Public exploit

  Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to …

  Apr 23, 2010
• Unscored —
  CVE-2009-4809 Public exploit

  Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to…

  Apr 23, 2010
• Unscored —
  CVE-2009-4808 Public exploit

  admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrati…

  Apr 23, 2010