Skip to content
OpenAdvisories

Archive

May 2010

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 

166 results · Clear filters · Feed

  • Unscored —
    CVE-2010-1549 Public exploit EPSS 78%

    Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote…

  • Unscored —
    CVE-2010-1740 Public exploit

    SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-1743 Public exploit

    SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2010-1744 Public exploit

    SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-1739 Public exploit

    SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2010-1737 Public exploit

    PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0, when magic_quotes_gpc is disabl…

  • Unscored —
    CVE-2010-1746 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attac…

  • Unscored —
    CVE-2010-1742 Public exploit

    Cross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2010-1741 Public exploit

    SQL injection vulnerability in request_account.php in Billwerx RC 5.2.2 PL2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2010-1735 Public exploit

    The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local use…

  • Unscored —
    CVE-2010-1734 Public exploit

    The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users …

  • Unscored —
    CVE-2010-1583 Public exploit

    SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN)…

  • Unscored —
    CVE-2010-1681 Public exploit EPSS 67%

    Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to e…

  • Unscored —
    CVE-2009-4836 Public exploit

    Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4841 Public exploit

    Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allo…

  • Unscored —
    CVE-2009-4840 Public exploit

    Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote atta…

  • Unscored —
    CVE-2010-1727 Public exploit

    SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2010-1726 Public exploit

    SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-1725 Public exploit

    SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-1724 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow …

  • Unscored —
    CVE-2010-1686 Public exploit

    Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-ass…

  • Unscored —
    CVE-2010-1710 Public exploit

    Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attacker…

  • Unscored —
    CVE-2010-1712 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attacker…

  • Unscored —
    CVE-2010-1685 Public exploit

    Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2010-1431 Public exploit

    SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-1708 Public exploit

    Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-1702 Public exploit

    SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-1713 Public exploit

    SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-1723 Public exploit Scanner template

    Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! al…

  • Unscored —
    CVE-2010-1687 Public exploit

    Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash…

  • Unscored —
    CVE-2010-1719 Public exploit Scanner template

    Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attack…

  • Unscored —
    CVE-2010-1711 Public exploit

    Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows …

  • Unscored —
    CVE-2010-1720 Public exploit

    SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote att…

  • Unscored —
    CVE-2010-1716 Public exploit

    SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers…

  • Unscored —
    CVE-2010-1722 Public exploit Scanner template

    Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2010-1705 Public exploit

    SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-1715 Public exploit Scanner template

    Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joo…

  • Unscored —
    CVE-2010-1704 Public exploit

    Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute ar…

  • Unscored —
    CVE-2010-1703 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script all…

  • Unscored —
    CVE-2010-1701 Public exploit

    SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL …