Archive
27 April 2010
Vulnerabilities first published on this day (UTC), newest first.
24 results · Feed
-
Unscored —
Unspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows remote authenticated use…
-
Unscored —CVE-2010-0105 Public exploit
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does no…
-
Unscored —CVE-2010-1559 Public exploit
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote a…
-
Unscored —
Buffer overflow in the REPEAT function in IBM DB2 9.1 before FP9 allows remote authenticated users to cause a denial of…
-
Unscored —CVE-2009-4828 Public exploit
Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 a…
-
Unscored —
The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remo…
-
Unscored —
Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP…
-
Unscored —CVE-2009-4826 Public exploit
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote a…
-
Unscored —
Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access t…
-
Unscored —CVE-2009-4825 Public exploit
8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —
Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unsp…
-
Unscored —
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 befo…
-
Unscored —CVE-2009-4817 Public exploit
Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-4813 Public exploit
Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to in…
-
Unscored —CVE-2009-4823 Public exploit
Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote …
-
Unscored —CVE-2009-4816 Public exploit
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to re…
-
Unscored —CVE-2009-4818 Public exploit
Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attacker…
-
Unscored —CVE-2009-4827 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in Mail Manager Pro allows remote attackers to hijack the …
-
Unscored —CVE-2009-4819 Public exploit
Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbit…
-
Unscored —CVE-2009-4822 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2…
-
Unscored —CVE-2009-4814 Public exploit
Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary…
-
Unscored —CVE-2009-4820 Public exploit
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —
Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files vi…