Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

191 results · Clear filters · Feed

  • Unscored —
    CVE-2010-1659 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows re…

  • Unscored —
    CVE-2010-1657 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2010-1656 Public exploit

    SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2010-1653 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! …

  • Unscored —
    CVE-2010-1660 Public exploit

    SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-1661 Public exploit

    Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2010-1652 Public exploit

    Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote atta…

  • Unscored —
    CVE-2010-1663 Public exploit EPSS 54%

    The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to…

  • Unscored —
    CVE-2010-1658 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows rem…

  • Unscored —
    CVE-2010-1662 Public exploit

    Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers …

  • Unscored —
    CVE-2010-1654 Public exploit

    Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remot…

  • Unscored —
    CVE-2010-0817 Public exploit EPSS 29%

    Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and poss…

  • Unscored —
    CVE-2010-1611 Public exploit

    Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication …

  • Unscored —
    CVE-2009-4832 Public exploit

    The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x8…

  • Unscored —
    CVE-2010-1606 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-1602 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attac…

  • Unscored —
    CVE-2010-1604 Public exploit

    Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute a…

  • Unscored —
    CVE-2010-1601 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to re…

  • Unscored —
    CVE-2010-1600 Public exploit

    SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacke…

  • Unscored —
    CVE-2010-1603 Public exploit Scanner template

    Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager col…

  • Unscored —
    CVE-2010-1607 Public exploit Scanner template

    Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.…

  • Unscored —
    CVE-2010-1599 Public exploit

    SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-1597 Public exploit EPSS 12%

    Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbi…

  • Unscored —
    CVE-2010-1591 Public exploit

    Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, inc…

  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Medium —
    CVE-2010-1587 Public exploit EPSS 78%

    Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

  • Unscored —
    CVE-2010-1429 Public exploit Scanner template EPSS 54%

    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 …

  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • Unscored —
    CVE-2010-1586 Public exploit Scanner template EPSS 10%

    Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to r…

  • Unscored —
    CVE-2010-0105 Public exploit

    The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does no…

  • Unscored —
    CVE-2010-1559 Public exploit

    SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote a…

  • Unscored —
    CVE-2009-4828 Public exploit

    Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 a…

  • Unscored —
    CVE-2009-4826 Public exploit

    Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote a…

  • Unscored —
    CVE-2009-4825 Public exploit

    8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2009-4817 Public exploit

    Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-4813 Public exploit

    Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to in…

  • Unscored —
    CVE-2009-4823 Public exploit

    Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote …

  • Unscored —
    CVE-2009-4816 Public exploit

    Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to re…

  • Unscored —
    CVE-2009-4818 Public exploit

    Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attacker…

  • Unscored —
    CVE-2009-4827 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in Mail Manager Pro allows remote attackers to hijack the …