Archive
April 2010
Vulnerabilities first published in this month (UTC), newest first.
191 results · Clear filters · Feed
-
Unscored —CVE-2009-4796 Public exploit
Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php i…
-
Unscored —CVE-2009-4797 Public exploit
SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-4793 Public exploit
Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenti…
-
Unscored —
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.…
-
Unscored —CVE-2009-4780 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inj…
-
Unscored —CVE-2009-4783 Public exploit
Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-4785 Public exploit
SQL injection vulnerability in the Quick News (com_quicknews) component for Joomla! allows remote attackers to execute …
-
Unscored —CVE-2009-4779 Public exploit
Multiple PHP remote file inclusion vulnerabilities in NukeHall 0.3 and earlier allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-4782 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbi…
-
Unscored —CVE-2009-4789 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers…
-
Unscored —CVE-2009-4781 Public exploit
TUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows local users to discover …
-
Unscored —CVE-2009-4775 Public exploit
Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of…
-
Unscored —CVE-2009-4784 Public exploit
SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute…
-
Unscored —
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE …
-
Unscored —CVE-2010-1458 Public exploit
Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remo…
-
Unscored —
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Se…
-
Unscored —
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) rem…
-
Unscored —CVE-2009-4767 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to injec…
-
Unscored —CVE-2010-1480 Public exploit
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execu…
-
Unscored —CVE-2010-1468 Public exploit
SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) comp…
-
Unscored —
Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacke…
-
Unscored —
Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for …
-
Unscored —
Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote att…
-
Unscored —CVE-2010-1477 Public exploit
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote a…
-
Unscored —CVE-2010-1479 Public exploit
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execu…
-
Unscored —
Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read a…
-
Unscored —
Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attack…
-
Unscored —
Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remot…
-
Unscored —
Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows r…
-
Unscored —
Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allo…
-
Unscored —
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote atta…
-
Unscored —
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbit…
-
Unscored —CVE-2010-1466 Public exploit
Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitra…
-
Unscored —CVE-2010-1467 Public exploit
Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitra…
-
Unscored —
Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attac…
-
Unscored —CVE-2010-1460 Public exploit
The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt s…
-
Unscored —
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earli…
-
Unscored —
The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 all…
-
Unscored —
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction r…