Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

191 results · Clear filters · Feed

  • Unscored —
    CVE-2010-0478 Public exploit EPSS 60%

    Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 20…

  • Unscored —
    CVE-2010-0477 Public exploit EPSS 50%

    The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 respo…

  • Unscored —
    CVE-2010-0480 Public exploit EPSS 68%

    Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, S…

  • Unscored —
    CVE-2010-0269 Public exploit EPSS 28%

    The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1,…

  • Unscored —
    CVE-2010-1316 Public exploit

    Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial o…

  • Unscored —
    CVE-2010-0870 Public exploit EPSS 13%

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote a…

  • Unscored —
    CVE-2010-0866 Public exploit EPSS 11%

    Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated …

  • Unscored —
    CVE-2010-1365 Public exploit

    SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execut…

  • Unscored —
    CVE-2010-1364 Public exploit

    SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to…

  • Unscored —
    CVE-2010-1369 Public exploit

    SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2010-1372 Public exploit

    SQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla! allows remote attackers to…

  • Unscored —
    CVE-2010-1366 Public exploit

    Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers…

  • Unscored —
    CVE-2010-1368 Public exploit

    SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-1363 Public exploit

    SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2010-1361 Public exploit

    Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote att…

  • Unscored —
    CVE-2010-1360 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2009-4511 Public exploit

    Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Se…

  • Unscored —
    CVE-2010-1352 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote…

  • Unscored —
    CVE-2010-1152 Public exploit EPSS 10%

    memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a…

  • Unscored —
    CVE-2010-1354 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2010-1349 Public exploit EPSS 20%

    Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Len…

  • Unscored —
    CVE-2010-1353 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to r…

  • Unscored —
    CVE-2010-1351 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, all…

  • Unscored —
    CVE-2010-1146 Public exploit

    The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the…

  • Unscored —
    CVE-2010-1350 Public exploit

    SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attacker…

  • Unscored —
    CVE-2009-3732 Public exploit EPSS 16%

    Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers…

  • Unscored —
    CVE-2010-1345 Public exploit Scanner template EPSS 17%

    Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote …

  • Unscored —
    CVE-2010-1338 Public exploit

    SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allow…

  • Unscored —
    CVE-2010-1336 Public exploit

    Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2010-1346 Public exploit

    SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote…

  • Unscored —
    CVE-2010-1342 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remot…

  • Unscored —
    CVE-2010-1340 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remot…

  • Unscored —
    CVE-2010-1337 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and…

  • Unscored —
    CVE-2010-1341 Public exploit

    SQL injection vulnerability in index.php in Systemsoftware Community Black Forum allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-1335 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register_globals is enabled, allow remot…

  • Unscored —
    CVE-2010-1343 Public exploit

    SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-1344 Public exploit

    SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attack…

  • Unscored —
    CVE-2010-1313 Public exploit Scanner template

    Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when m…

  • Unscored —
    CVE-2010-1312 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remot…

  • Unscored —
    CVE-2010-1315 Public exploit Scanner template

    Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and …