Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

← March 2010 2010 / April May 2010 →
  1. 148
  2. 2 
  3. 3 
  4. 4 
  5. 543
  6. 624
  7. 711
  8. 815
  9. 918
  10. 10 
  11. 11 
  12. 1221
  13. 1366
  14. 1440
  15. 1510
  16. 1614
  17. 17 
  18. 18 
  19. 1913
  20. 2027
  21. 2119
  22. 2216
  23. 2328
  24. 24 
  25. 25 
  26. 2617
  27. 2724
  28. 2818
  29. 2928
  30. 3016
All Critical High Medium Low Exploited only Public exploit

191 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4819 Public exploit

    Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbit…

  • Unscored —
    CVE-2009-4822 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject…

  • Unscored —
    CVE-2009-4814 Public exploit

    Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2009-4820 Public exploit

    Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2010-1544 Public exploit

    micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a lo…

  • Unscored —
    CVE-2010-1537 Public exploit

    Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute ar…

  • Unscored —
    CVE-2010-1540 Public exploit Scanner template

    Directory traversal vulnerability in index.php in the MyBlog (com_myblog) component 3.0.329 for Joomla! allows remote a…

  • Unscored —
    CVE-2010-1538 Public exploit

    SQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2010-1535 Public exploit Scanner template EPSS 15%

    Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attacker…

  • Unscored —
    CVE-2010-1532 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows rem…

  • Unscored —
    CVE-2010-1529 Public exploit

    SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote att…

  • Unscored —
    CVE-2010-1531 Public exploit Scanner template EPSS 17%

    Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to r…

  • Unscored —
    CVE-2010-1534 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to r…

  • Unscored —
    CVE-2010-1528 Public exploit

    PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows…

  • Unscored —
    CVE-2010-1533 Public exploit Scanner template EPSS 15%

    Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to r…

  • Unscored —
    CVE-2010-1498 Public exploit

    Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-1496 Public exploit

    SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2010-1495 Public exploit Scanner template EPSS 18%

    Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to re…

  • Unscored —
    CVE-2010-1493 Public exploit

    SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-1499 Public exploit

    SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-1497 Public exploit

    Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject …

  • Medium —
    CVE-2010-1157 Public exploit EPSS 53%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2010-1491 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-1494 Public exploit Scanner template EPSS 17%

    Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to r…

  • Unscored —
    CVE-2009-4801 Public exploit

    EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via r…

  • Unscored —
    CVE-2009-4806 Public exploit

    admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which…

  • Unscored —
    CVE-2009-4807 Public exploit

    Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-4805 Public exploit

    Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to …

  • Unscored —
    CVE-2009-4809 Public exploit

    Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to…

  • Unscored —
    CVE-2009-4808 Public exploit

    admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrati…

  • Unscored —
    CVE-2010-1486 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to…

  • Unscored —
    CVE-2010-1320 Public exploit EPSS 12%

    Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1…

    krb5 Debian
  • Unscored —
    CVE-2009-4800 Public exploit

    Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitra…

  • Unscored —
    CVE-2009-4792 Public exploit

    SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to exe…

  • Unscored —
    CVE-2009-4794 Public exploit

    Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2009-4790 Public exploit

    Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modi…

  • Unscored —
    CVE-2009-4791 Public exploit

    Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute …

  • Unscored —
    CVE-2009-4798 Public exploit

    Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2009-4799 Public exploit

    Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote at…

  • Unscored —
    CVE-2009-4795 Public exploit

    Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow re…