Skip to content
OpenAdvisories

Archive

May 2010

Vulnerabilities first published in this month (UTC), newest first.

← April 2010 2010 / May June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

166 results · Clear filters · Feed

  • Unscored —
    CVE-2010-2115 Public exploit EPSS 56%

    SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafte…

  • Unscored —
    CVE-2010-1938 Public exploit EPSS 22%

    Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on Free…

  • Unscored —
    CVE-2010-2020 Public exploit

    sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is…

  • Medium —
    CVE-2010-2103 Public exploit EPSS 35%

    Improper Neutralization of Input During Web Page Generation in Apache Axis2

    Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allow…

    org.apache.axis2.wso2:axis2 Maven
  • Unscored —
    CVE-2010-2099 Public exploit

    bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the p…

  • Unscored —
    CVE-2010-2094 Public exploit EPSS 13%

    Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers …

  • Unscored —
    CVE-2010-2102 Public exploit

    Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.

  • Unscored —
    CVE-2010-1296 Public exploit EPSS 20%

    Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrar…

  • Unscored —
    CVE-2010-2091 Public exploit EPSS 18%

    Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properl…

  • Unscored —
    CVE-2010-2089 Public exploit EPSS 15%

    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengt…

    python2.7 Debian
  • Unscored —
    CVE-2010-2025 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR…

  • Unscored —
    CVE-2009-4873 Public exploit EPSS 21%

    Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to c…

  • Unscored —
    CVE-2009-4874 Public exploit

    TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attac…

  • Unscored —
    CVE-2009-4876 Public exploit

    admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the c…

  • Unscored —
    CVE-2010-2045 Public exploit Scanner template

    Directory traversal vulnerability in the Dione Form Wizard (aka FDione or com_dioneformwizard) component 1.0.2 for Joom…

  • Unscored —
    CVE-2010-2044 Public exploit

    SQL injection vulnerability in the Konsultasi (com_konsultasi) component 1.0.0 for Joomla! allows remote attackers to e…

  • Unscored —
    CVE-2010-2047 Public exploit

    SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-2050 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8.0b for Joomla! allows…

  • Unscored —
    CVE-2010-2051 Public exploit

    SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-2037 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! …

  • Unscored —
    CVE-2010-2036 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows…

  • Unscored —
    CVE-2010-2033 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joom…

  • Unscored —
    CVE-2010-2042 Public exploit

    SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-2039 Public exploit

    Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hija…

  • Unscored —
    CVE-2010-2038 Public exploit

    Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authentica…

  • Unscored —
    CVE-2010-2034 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows r…

  • Unscored —
    CVE-2010-2035 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remot…

  • Unscored —
    CVE-2010-2040 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers …

  • Unscored —
    CVE-2010-1688 Public exploit EPSS 15%

    Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, all…

  • Unscored —
    CVE-2010-2031 Public exploit

    KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwri…

  • Unscored —
    CVE-2010-2028 Public exploit EPSS 14%

    Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2010-2032 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3…

  • Unscored —
    CVE-2010-2015 Public exploit

    Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1)…

  • Unscored —
    CVE-2010-2018 Public exploit Scanner template

    Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2010-2016 Public exploit

    SQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-2005 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2004 Public exploit

    Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assis…

  • Unscored —
    CVE-2010-2006 Public exploit

    Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authen…

  • Unscored —
    CVE-2010-1999 Public exploit

    Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enable…

  • Unscored —
    CVE-2010-1994 Public exploit

    SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL com…