Skip to content
OpenAdvisories

Archive

27 May 2010

Vulnerabilities first published on this day (UTC), newest first.

← April 2010 2010 / May /27 June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

34 results · Feed

  • Medium —
    CVE-2010-2103 Public exploit EPSS 35%

    Improper Neutralization of Input During Web Page Generation in Apache Axis2

    Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allow…

    org.apache.axis2.wso2:axis2 Maven
  • Unscored —
    CVE-2010-2093

    Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows…

  • Unscored —
    CVE-2010-2099 Public exploit

    bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the p…

  • Unscored —
    CVE-2010-2096

    Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execu…

  • Unscored —
    CVE-2010-2098

    Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQ…

  • Unscored —
    CVE-2010-2104

    Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to writ…

  • Unscored —
    CVE-2010-2100

    The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions …

  • Unscored —
    CVE-2010-2094 Public exploit EPSS 13%

    Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers …

  • Unscored —
    CVE-2010-2092

    SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL c…

    cacti Debian
  • Unscored —
    CVE-2010-2101

    The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 t…

  • Unscored —
    CVE-2010-2095

    SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-2102 Public exploit

    Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.

  • Unscored —
    CVE-2010-2097

    The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 thro…

  • Unscored —
    CVE-2010-0599

    Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the…

  • Unscored —
    CVE-2010-0595

    Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the…

  • Unscored —
    CVE-2010-0600

    Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the…

  • Unscored —
    CVE-2010-0596

    Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisc…

  • Unscored —
    CVE-2010-0597

    Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 …

  • Unscored —
    CVE-2010-0598

    Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the…

  • Unscored —
    CVE-2010-1959

    Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify dat…

  • Unscored —
    CVE-2010-1296 Public exploit EPSS 20%

    Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrar…

  • Unscored —
    CVE-2010-1449

    Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified im…

  • Unscored —
    CVE-2010-1450

    Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspe…

  • Unscored —
    CVE-2010-1634

    Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent …

    python2.7 Debian
  • Unscored —
    CVE-2010-2090

    The npb_protocol_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Ser…

  • Unscored —
    CVE-2010-2091 Public exploit EPSS 18%

    Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properl…

  • Unscored —
    CVE-2010-2089 Public exploit EPSS 15%

    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengt…

    python2.7 Debian
  • Unscored —
    CVE-2009-4134

    Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application c…

  • Medium —
    CVE-2010-1459

    Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability

    The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.asp…

    mono mono Debian NuGet
  • Unscored —
    CVE-2010-2085

    The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac prope…

  • Medium —
    CVE-2010-2086

    Apache MyFaces Cross-site Scripting vulnerability

    Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression…

    org.apache.myfaces.core:myfaces-core-module Maven
  • Unscored —
    CVE-2010-2087

    Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, doe…

    mojarra Debian
  • Unscored —
    CVE-2010-2084 EPSS 13%

    Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerCont…

  • Unscored —
    CVE-2010-2088

    ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to cond…