Skip to content
OpenAdvisories

Archive

29 April 2010

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2010-0817 Public exploit EPSS 29%

    Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and poss…

  • Unscored —
    CVE-2010-1611 Public exploit

    Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication …

  • Unscored —
    CVE-2009-4832 Public exploit

    The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x8…

  • Unscored —
    CVE-2010-1606 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-1602 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attac…

  • Unscored —
    CVE-2010-1604 Public exploit

    Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute a…

  • Unscored —
    CVE-2010-1601 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to re…

  • Unscored —
    CVE-2010-1600 Public exploit

    SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacke…

  • Unscored —
    CVE-2010-1603 Public exploit Scanner template

    Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager col…

  • Unscored —
    CVE-2010-1607 Public exploit Scanner template

    Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.…

  • Unscored —
    CVE-2010-1599 Public exploit

    SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-1597 Public exploit EPSS 12%

    Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbi…