Skip to content
OpenAdvisories

Archive

18 June 2010

Vulnerabilities first published on this day (UTC), newest first.

← May 2010 2010 / June /18 July 2010 →
  1. 118
  2. 214
  3. 317
  4. 4 
  5. 5 
  6. 6 
  7. 723
  8. 836
  9. 97
  10. 1011
  11. 1156
  12. 12 
  13. 13 
  14. 1425
  15. 1553
  16. 1614
  17. 1728
  18. 1830
  19. 19 
  20. 20 
  21. 2121
  22. 2216
  23. 2320
  24. 2413
  25. 2526
  26. 26 
  27. 27 
  28. 2823
  29. 2918
  30. 3021
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2010-2340 Public exploit

    SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attacke…

  • Unscored —
    CVE-2010-2341 Public exploit

    PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta a…

  • Unscored —
    CVE-2010-2338 Public exploit

    Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-2339

    SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-2336 Public exploit

    index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within th…

  • Unscored —
    CVE-2010-2330 Public exploit EPSS 28%

    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2010-2329 Public exploit

    Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist e…

  • Unscored —
    CVE-2010-2334 Public exploit

    Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 2…

  • Unscored —
    CVE-2010-2331 Public exploit

    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2010-2335 Public exploit

    SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote a…

  • Unscored —
    CVE-2010-2332 Public exploit

    Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attacker…

  • Unscored —
    CVE-2010-2333 Public exploit EPSS 60%

    LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scri…

  • Unscored —
    CVE-2010-0831

    Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to c…

    fastjar Debian
  • Unscored —
    CVE-2010-2323

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive informatio…

  • Unscored —
    CVE-2010-2326

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows …

  • Unscored —
    CVE-2010-2325

    Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 be…

  • Unscored —
    CVE-2010-2324

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link inject…

  • Unscored —
    CVE-2010-2328

    The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2010-2322

    Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers …

    fastjar Debian
  • Unscored —
    CVE-2010-2327

    mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSph…

  • Unscored —
    CVE-2010-0407

    Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka P…

    pcsc-lite Debian
  • Unscored —
    CVE-2010-0284

    Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in np…

  • Unscored —
    CVE-2010-1387

    Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 …

  • Unscored —
    CVE-2010-1763

    Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a diff…

  • Unscored —
    CVE-2010-1769

    WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-boun…

  • Unscored —
    CVE-2010-2321 Public exploit EPSS 21%

    Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2010-2068 EPSS 16%

    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Wind…

  • Unscored —
    CVE-2010-2192

    The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlin…

    pmount Debian
  • Unscored —
    CVE-2009-4902

    Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in M…

  • Unscored —
    CVE-2009-4901

    The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite bef…