21 June 2010

21 results · Feed

• Unscored —
  CVE-2010-2358 Public exploit

  PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc i…

  Jun 21, 2010
• Unscored —
  CVE-2010-2356 Public exploit

  Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to injec…

  Jun 21, 2010
• Unscored —
  CVE-2010-2355 Public exploit

  Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject ar…

  Jun 21, 2010
• Unscored —
  CVE-2010-2354 Public exploit

  SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary …

  Jun 21, 2010
• Unscored —
  CVE-2010-2359 Public exploit

  SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arb…

  Jun 21, 2010
• Unscored —
  CVE-2010-2357 Public exploit

  SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute ar…

  Jun 21, 2010
• Unscored —
  CVE-2010-1958

  Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal a…

  Jun 21, 2010
• Unscored —
  CVE-2010-2353

  The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform acces…

  Jun 21, 2010
• Unscored —
  CVE-2010-2349 Public exploit

  H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which trig…

  Jun 21, 2010
• Unscored —
  CVE-2010-2348 Public exploit

  Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execut…

  Jun 21, 2010
• Unscored —
  CVE-2010-2352

  The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupa…

  Jun 21, 2010
• Unscored —
  CVE-2010-2351 Public exploit EPSS 16%

  Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows rem…

  Jun 21, 2010
• Unscored —
  CVE-2010-2347

  The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 thro…

  Jun 21, 2010
• Unscored —
  CVE-2010-2350

  Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (cr…

  ziproxy Debian
  Jun 21, 2010
• Unscored —
  CVE-2010-0542

  The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check th…

  cups Debian
  Jun 21, 2010
• Unscored —
  CVE-2010-1168

  The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reva…

  perl Debian
  Jun 21, 2010
• Medium —
  CVE-2010-1622 Public exploit EPSS 52%

  Improper Control of Generation of Code ('Code Injection') in Spring Framework

  SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

  org.springframework:spring Maven
  Jun 21, 2010
• Unscored —
  CVE-2010-2345

  Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack …

  Jun 21, 2010
• Unscored —
  CVE-2010-2344

  Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inje…

  Jun 21, 2010
• Unscored —
  CVE-2010-2343 Public exploit EPSS 37%

  Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arb…

  Jun 21, 2010
• Unscored —
  CVE-2010-2342 Public exploit

  SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attacker…

  Jun 21, 2010