Skip to content
OpenAdvisories

Archive

25 May 2010

Vulnerabilities first published on this day (UTC), newest first.

← April 2010 2010 / May /25 June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2010-2078

    DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

  • Unscored —
    CVE-2010-2079

    DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary fil…

  • Unscored —
    CVE-2010-2045 Public exploit Scanner template

    Directory traversal vulnerability in the Dione Form Wizard (aka FDione or com_dioneformwizard) component 1.0.2 for Joom…

  • Unscored —
    CVE-2010-2048

    Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote …

  • Unscored —
    CVE-2010-2046

    Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com_activehelper_livehelp) component …

  • Unscored —
    CVE-2010-2044 Public exploit

    SQL injection vulnerability in the Konsultasi (com_konsultasi) component 1.0.0 for Joomla! allows remote attackers to e…

  • Unscored —
    CVE-2010-2047 Public exploit

    SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-2050 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8.0b for Joomla! allows…

  • Unscored —
    CVE-2010-2051 Public exploit

    SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-2049

    Cross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build…

  • Unscored —
    CVE-2010-2037 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! …

  • Unscored —
    CVE-2010-2041

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attacker…

  • Unscored —
    CVE-2010-2036 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows…

  • Unscored —
    CVE-2010-2033 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joom…

  • Unscored —
    CVE-2010-2042 Public exploit

    SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-2043

    Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to…

  • Unscored —
    CVE-2010-2039 Public exploit

    Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hija…

  • Unscored —
    CVE-2010-2038 Public exploit

    Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authentica…

  • Unscored —
    CVE-2010-2034 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows r…

  • Unscored —
    CVE-2010-2035 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remot…

  • Unscored —
    CVE-2010-2040 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers …