Skip to content
OpenAdvisories

Archive

14 June 2010

Vulnerabilities first published on this day (UTC), newest first.

← May 2010 2010 / June /14 July 2010 →
  1. 118
  2. 214
  3. 317
  4. 4 
  5. 5 
  6. 6 
  7. 723
  8. 836
  9. 97
  10. 1011
  11. 1156
  12. 12 
  13. 13 
  14. 1425
  15. 1553
  16. 1614
  17. 1728
  18. 1830
  19. 19 
  20. 20 
  21. 2121
  22. 2216
  23. 2320
  24. 2413
  25. 2526
  26. 26 
  27. 27 
  28. 2823
  29. 2918
  30. 3021
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2010-1937

    Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to e…

  • Unscored —
    CVE-2010-1515

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers …

  • Unscored —
    CVE-2010-1514

    Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain p…

  • Unscored —
    CVE-2010-2280

    Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attacke…

  • Unscored —
    CVE-2010-2282 Public exploit

    Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication…

  • Unscored —
    CVE-2010-2267

    Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web Server (aka Rock Web Server) 1.4.7 allow remote atta…

  • Unscored —
    CVE-2010-2271

    Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to…

  • Unscored —
    CVE-2010-2054

    Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMax…

  • Unscored —
    CVE-2010-2279

    The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SS…

  • Unscored —
    CVE-2010-2276

    The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.…

  • Unscored —
    CVE-2010-2270

    Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for r…

  • Medium —
    CVE-2010-2273 Public exploit

    Cross-Site Scripting in dojo

    Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly …

    dojo dojo Debian npm
  • Unscored —
    CVE-2010-2268

    Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows…

  • Unscored —
    CVE-2010-2269

    Directory traversal vulnerability in loadstatic.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote att…

  • Unscored —
    CVE-2010-2275 Public exploit

    Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote a…

    dojo Debian
  • Unscored —
    CVE-2010-2278

    The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follo…

  • Unscored —
    CVE-2010-2281

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject ar…

  • Medium —
    CVE-2010-2274

    Dojo Open Redirect vulnerability

    Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified …

    dojo org.dojotoolkit:dojo Debian Maven
  • Unscored —
    CVE-2010-2272

    Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vector…

  • Unscored —
    CVE-2010-2277

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attacker…

  • Unscored —
    CVE-2010-0990

    Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Softwa…

  • Unscored —
    CVE-2010-1885 Public exploit EPSS 71%

    The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server…

  • Unscored —
    CVE-2010-2265 Public exploit EPSS 21%

    Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows He…

  • Unscored —
    CVE-2010-2263 Public exploit EPSS 72%

    nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code o…

  • Unscored —
    CVE-2010-2266 Public exploit EPSS 22%

    nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal seque…