Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

191 results · Clear filters · Feed

  • Unscored —
    CVE-2010-1314 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote …

  • Unscored —
    CVE-2010-1309 Public exploit

    Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary…

  • Unscored —
    CVE-2010-1306 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote a…

  • Unscored —
    CVE-2010-1305 Public exploit Scanner template EPSS 21%

    Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly o…

  • Unscored —
    CVE-2010-1308 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read …

  • Unscored —
    CVE-2010-1307 Public exploit Scanner template EPSS 10%

    Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attacker…

  • Unscored —
    CVE-2010-1304 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! a…

  • Unscored —
    CVE-2008-7254 Public exploit

    Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, …

  • Unscored —
    CVE-2010-1300 Public exploit

    SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-1301 Public exploit

    SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-1299 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is d…

  • Unscored —
    CVE-2010-1302 Public exploit Scanner template

    Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! …

  • Unscored —
    CVE-2010-1186 Public exploit

    Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress …

  • Unscored —
    CVE-2010-1147 Public exploit

    Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated…

  • Unscored —
    CVE-2010-1271 Public exploit

    SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-1272 Public exploit

    PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers t…

  • Unscored —
    CVE-2010-1269 Public exploit

    SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attacker…

  • Unscored —
    CVE-2010-1265 Public exploit

    SQL injection vulnerability in Adam Corley dcsFlashGames (com_dcs_flashgames) allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-1268 Public exploit

    Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is disabled, allows remote …

  • Unscored —
    CVE-2010-1266 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to exec…

  • Unscored —
    CVE-2010-1270 Public exploit

    SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-1267 Public exploit

    Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbit…

  • Unscored —
    CVE-2009-2936 Public exploit EPSS 64%

    The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy serv…

  • Unscored —
    CVE-2010-1239 Public exploit

    Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Ac…

  • Unscored —
    CVE-2010-1240 Public exploit EPSS 74%

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents o…

  • Unscored —
    CVE-2010-1225 Public exploit EPSS 28%

    The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 200…

  • Unscored —
    CVE-2010-1226 Public exploit

    The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attacke…

  • Critical 9.8
    CVE-2010-0840 Exploited Public exploit EPSS 96%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18…

    KEV May 25, 2022
  • Unscored —
    CVE-2010-0094 Public exploit EPSS 81%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18…

  • Unscored —
    CVE-2010-0842 Public exploit EPSS 78%

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.…

  • Unscored —
    CVE-2010-0838 Public exploit EPSS 15%

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, an…