Archive
May 2010
Vulnerabilities first published in this month (UTC), newest first.
402 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attack…
-
Unscored —
Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject a…
-
Unscored —
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service…
-
Unscored —
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of se…
-
Unscored —
Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly…
-
Unscored —CVE-2010-1453 Public exploit
Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inje…
-
Unscored —
fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-char…
-
Unscored —CVE-2010-1143 Public exploit
Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 bu…
-
Unscored —
Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests…
-
Unscored —
Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote…
-
Unscored —
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attacke…
-
Unscored —
ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote …
-
Unscored —
ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers …
-
Unscored —
The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows rem…
-
Unscored —CVE-2010-1740 Public exploit
SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-1743 Public exploit
SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2010-1744 Public exploit
SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2010-1739 Public exploit
SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2010-1737 Public exploit
PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0, when magic_quotes_gpc is disabl…
-
Unscored —
KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…
-
Unscored —CVE-2010-1746 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attac…
-
Unscored —CVE-2010-1742 Public exploit
Cross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2010-1741 Public exploit
SQL injection vulnerability in request_account.php in Billwerx RC 5.2.2 PL2 allows remote attackers to execute arbitrar…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application Framework before 1.2.3 allows…
-
Unscored —CVE-2010-1735 Public exploit
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local use…
-
Unscored —CVE-2010-1734 Public exploit
The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users …
-
Unscored —
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-1583 Public exploit
SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN)…
-
Unscored —
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to e…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow r…
-
Unscored —CVE-2009-4836 Public exploit
Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arb…
-
Unscored —
SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows re…
-
Unscored —
The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header function…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and ea…
-
Unscored —CVE-2009-4841 Public exploit
Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allo…
-
Unscored —CVE-2009-4840 Public exploit
Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote atta…
-
Unscored —
Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2010-1727 Public exploit
SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via th…