Archive
April 2010
Vulnerabilities first published in this month (UTC), newest first.
191 results · Clear filters · Feed
-
Unscored —
Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows re…
-
Unscored —
Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers …
-
Unscored —CVE-2010-1656 Public exploit
SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute …
-
Unscored —
Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! …
-
Unscored —CVE-2010-1660 Public exploit
SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbit…
-
Unscored —CVE-2010-1661 Public exploit
Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2010-1652 Public exploit
Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote atta…
-
Unscored —
The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to…
-
Unscored —
Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows rem…
-
Unscored —CVE-2010-1662 Public exploit
Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers …
-
Unscored —CVE-2010-1654 Public exploit
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and poss…
-
Unscored —CVE-2010-1611 Public exploit
Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication …
-
Unscored —CVE-2009-4832 Public exploit
The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x8…
-
Unscored —CVE-2010-1606 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrar…
-
Unscored —
Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attac…
-
Unscored —CVE-2010-1604 Public exploit
Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute a…
-
Unscored —
Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to re…
-
Unscored —CVE-2010-1600 Public exploit
SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacke…
-
Unscored —
Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager col…
-
Unscored —
Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.…
-
Unscored —CVE-2010-1599 Public exploit
SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary …
-
Unscored —
Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbi…
-
Unscored —CVE-2010-1591 Public exploit
Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, inc…
-
Low 3.7
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…
KEV May 25, 2022 -
Medium —
Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler
The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.
-
Unscored —
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 …
-
Medium 5.9
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …
KEV May 25, 2022 -
Unscored —
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to r…
-
Unscored —CVE-2010-0105 Public exploit
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does no…
-
Unscored —CVE-2010-1559 Public exploit
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote a…
-
Unscored —CVE-2009-4828 Public exploit
Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 a…
-
Unscored —CVE-2009-4826 Public exploit
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote a…
-
Unscored —CVE-2009-4825 Public exploit
8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2009-4817 Public exploit
Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-4813 Public exploit
Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to in…
-
Unscored —CVE-2009-4823 Public exploit
Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote …
-
Unscored —CVE-2009-4816 Public exploit
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to re…
-
Unscored —CVE-2009-4818 Public exploit
Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attacker…
-
Unscored —CVE-2009-4827 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in Mail Manager Pro allows remote attackers to hijack the …