Skip to content
OpenAdvisories

Archive

21 June 2010

Vulnerabilities first published on this day (UTC), newest first.

← May 2010 2010 / June /21 July 2010 →
  1. 118
  2. 214
  3. 317
  4. 4 
  5. 5 
  6. 6 
  7. 723
  8. 836
  9. 97
  10. 1011
  11. 1156
  12. 12 
  13. 13 
  14. 1425
  15. 1553
  16. 1614
  17. 1728
  18. 1830
  19. 19 
  20. 20 
  21. 2121
  22. 2216
  23. 2320
  24. 2413
  25. 2526
  26. 26 
  27. 27 
  28. 2823
  29. 2918
  30. 3021
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Unscored —
    CVE-2010-2358 Public exploit

    PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc i…

  • Unscored —
    CVE-2010-2356 Public exploit

    Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to injec…

  • Unscored —
    CVE-2010-2355 Public exploit

    Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject ar…

  • Unscored —
    CVE-2010-2354 Public exploit

    SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-2359 Public exploit

    SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-2357 Public exploit

    SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-2349 Public exploit

    H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which trig…

  • Unscored —
    CVE-2010-2348 Public exploit

    Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2010-2351 Public exploit EPSS 16%

    Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows rem…

  • Medium —
    CVE-2010-1622 Public exploit EPSS 52%

    Improper Control of Generation of Code ('Code Injection') in Spring Framework

    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

    org.springframework:spring Maven
  • Unscored —
    CVE-2010-2343 Public exploit EPSS 37%

    Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-2342 Public exploit

    SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attacker…