Archive
May 2010
Vulnerabilities first published in this month (UTC), newest first.
166 results · Clear filters · Feed
-
Unscored —CVE-2010-1934 Public exploit
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, a…
-
Unscored —CVE-2010-1927 Public exploit
Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals…
-
Unscored —
Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP…
-
Unscored —CVE-2010-1457 Public exploit
Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -…
-
Unscored —CVE-2010-1869 Public exploit
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to e…
-
Unscored —CVE-2010-1918 Public exploit
SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-1905 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistanc…
-
Unscored —CVE-2010-1877 Public exploit
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2010-1873 Public exploit
SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote a…
-
Unscored —
Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows r…
-
Unscored —
Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to…
-
Unscored —CVE-2010-1872 Public exploit
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject …
-
Unscored —CVE-2010-1874 Public exploit
SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote …
-
Unscored —CVE-2010-1876 Public exploit
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-4864 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Scri…
-
Unscored —CVE-2009-4867 Public exploit
Buffer overflow in Tuniac 090517c allows remote attackers to cause a denial of service (application crash) or possibly …
-
Unscored —CVE-2009-4869 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-4871 Public exploit
SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-4857 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrar…
-
Unscored —CVE-2009-4856 Public exploit
Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inje…
-
Unscored —CVE-2009-4870 Public exploit
Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-4855 Public exploit
SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-4862 Public exploit
Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-4872 Public exploit
Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execu…
-
Unscored —CVE-2009-4863 Public exploit
Stack-based buffer overflow in UltraPlayer Media Player 2.112 allows remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2009-4860 Public exploit
SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-4868 Public exploit
Cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-4858 Public exploit
Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject…
-
Unscored —CVE-2010-1859 Public exploit
SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2010-1866 Public exploit
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent at…
-
Unscored —CVE-2009-4854 Public exploit
addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.
-
Unscored —CVE-2010-1855 Public exploit
SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute ar…
-
Unscored —
Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote att…
-
Unscored —CVE-2010-1856 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, …
-
Unscored —
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is …
-
Unscored —CVE-2010-1437 Public exploit
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earli…
-
Unscored —CVE-2009-4849 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 86…
-
Unscored —
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a Scene…
-
Unscored —CVE-2010-1453 Public exploit
Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inje…
-
Unscored —CVE-2010-1143 Public exploit
Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 bu…