Skip to content
OpenAdvisories

Archive

20 May 2010

Vulnerabilities first published on this day (UTC), newest first.

← April 2010 2010 / May /20 June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2010-2007

    Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote a…

  • Unscored —
    CVE-2010-2005 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2004 Public exploit

    Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assis…

  • Unscored —
    CVE-2010-2006 Public exploit

    Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authen…

  • Unscored —
    CVE-2010-0745

    Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU cons…

    dovecot Debian
  • Unscored —
    CVE-2010-1999 Public exploit

    Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enable…

  • Unscored —
    CVE-2010-1996

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated u…

  • Unscored —
    CVE-2010-1992

    Google Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC…

  • Unscored —
    CVE-2010-1986

    Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (memory consumption and ap…

  • Unscored —
    CVE-2010-1994 Public exploit

    SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2010-1993

    Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote atta…

  • Unscored —
    CVE-2010-1987

    Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (memory consumption, out-o…

  • Unscored —
    CVE-2010-1991 EPSS 11%

    Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFR…

  • Unscored —
    CVE-2010-1039 Public exploit EPSS 19%

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, …

  • Unscored —
    CVE-2010-1997 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with …

  • Unscored —
    CVE-2010-1995

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated u…

  • Unscored —
    CVE-2010-1990

    Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IF…

  • Unscored —
    CVE-2010-1998

    Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authe…

  • Unscored —
    CVE-2010-1989

    Opera 9.52 executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a m…

  • Unscored —
    CVE-2010-1988

    Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (NULL pointer dereference …

  • Unscored —
    CVE-2010-2002

    Cross-site scripting (XSS) vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal …

  • Unscored —
    CVE-2010-2003 Public exploit

    Cross-site scripting (XSS) vulnerability in misc/get_admin.php in Advanced Poll 2.08 allows remote attackers to inject …

  • Unscored —
    CVE-2010-2000

    Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1…

  • Unscored —
    CVE-2010-2001

    Cross-site scripting (XSS) vulnerability in the CiviRegister module before 6.x-1.1 for Drupal allows remote attackers t…