Skip to content
OpenAdvisories

Archive

May 2010

Vulnerabilities first published in this month (UTC), newest first.

← April 2010 2010 / May June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

402 results · Feed

  • Unscored —
    CVE-2010-2039 Public exploit

    Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hija…

  • Unscored —
    CVE-2010-2038 Public exploit

    Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authentica…

  • Unscored —
    CVE-2010-2034 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows r…

  • Unscored —
    CVE-2010-2035 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remot…

  • Unscored —
    CVE-2010-2040 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers …

  • Unscored —
    CVE-2006-7239

    The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers t…

  • Unscored —
    CVE-2010-1688 Public exploit EPSS 15%

    Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, all…

  • Unscored —
    CVE-2010-2027

    Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on (1) files…

  • Unscored —
    CVE-2010-2031 Public exploit

    KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwri…

  • Unscored —
    CVE-2010-2028 Public exploit EPSS 14%

    Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2010-2030

    Cross-site scripting (XSS) vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for…

  • Unscored —
    CVE-2010-2032 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3…

  • Unscored —
    CVE-2010-2029

    Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to b…

  • Unscored —
    CVE-2010-2015 Public exploit

    Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1)…

  • Unscored —
    CVE-2010-2017

    Cross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers…

  • Unscored —
    CVE-2010-2012

    SQL injection vulnerability in function.php in MigasCMS 1.1, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2010-2018 Public exploit Scanner template

    Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2010-2019

    SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic_quotes_gpc is disabled, allows remote att…

  • Unscored —
    CVE-2010-2016 Public exploit

    SQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-2013

    Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2010-2014

    Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2010-1546

    Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x bef…

  • Unscored —
    CVE-2010-1548

    The auto-complete functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal does not foll…

  • Unscored —
    CVE-2010-1547

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1…

  • Unscored —
    CVE-2010-2010

    Multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for …

  • Unscored —
    CVE-2010-2011 EPSS 11%

    Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, whi…

  • Unscored —
    CVE-2010-0539

    Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java …

  • Unscored —
    CVE-2010-0538

    Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not properly handle mediaLib…

  • Unscored —
    CVE-2010-1436

    gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occup…

  • Unscored —
    CVE-2010-1626

    MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink …

  • Unscored —
    CVE-2010-1446

    arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on Po…

  • Unscored —
    CVE-2010-2009

    Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly …

  • Unscored —
    CVE-2010-2007

    Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote a…

  • Unscored —
    CVE-2010-2005 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2004 Public exploit

    Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assis…

  • Unscored —
    CVE-2010-2006 Public exploit

    Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authen…

  • Unscored —
    CVE-2010-0745

    Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU cons…

    dovecot Debian
  • Unscored —
    CVE-2010-1999 Public exploit

    Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enable…

  • Unscored —
    CVE-2010-1996

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated u…

  • Unscored —
    CVE-2010-1992

    Google Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC…