Skip to content
OpenAdvisories

Archive

5 May 2010

Vulnerabilities first published on this day (UTC), newest first.

← April 2010 2010 / May /5 June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2010-1732

    Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application Framework before 1.2.3 allows…

  • Unscored —
    CVE-2010-1735 Public exploit

    The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local use…

  • Unscored —
    CVE-2010-1734 Public exploit

    The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users …

  • Unscored —
    CVE-2010-1733

    Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQ…

    ocsinventory-server Debian
  • Unscored —
    CVE-2010-1583 Public exploit

    SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN)…

  • Unscored —
    CVE-2010-1681 Public exploit EPSS 67%

    Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to e…

  • Unscored —
    CVE-2009-4837

    Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow r…

  • Unscored —
    CVE-2009-4836 Public exploit

    Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4838

    SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows re…

  • Unscored —
    CVE-2009-4835

    The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header function…

    libsndfile Debian
  • Unscored —
    CVE-2009-4839

    Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and ea…

  • Unscored —
    CVE-2009-4841 Public exploit

    Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allo…

  • Unscored —
    CVE-2009-4840 Public exploit

    Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote atta…

  • Unscored —
    CVE-2010-0995

    Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-1727 Public exploit

    SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-1730

    Dolphin Browser 2.5.0 on the HTC Hero allows remote attackers to cause a denial of service (application crash) via Java…

  • Unscored —
    CVE-2010-1731

    Google Chrome on the HTC Hero allows remote attackers to cause a denial of service (application crash) via JavaScript t…

  • Unscored —
    CVE-2010-1438

    Web Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, wh…

  • Unscored —
    CVE-2010-1726 Public exploit

    SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-1728

    Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur async…

  • Unscored —
    CVE-2010-1729

    WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2010-1725 Public exploit

    SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-1724 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow …