Skip to content
OpenAdvisories

Archive

28 June 2010

Vulnerabilities first published on this day (UTC), newest first.

← May 2010 2010 / June /28 July 2010 →
  1. 118
  2. 214
  3. 317
  4. 4 
  5. 5 
  6. 6 
  7. 723
  8. 836
  9. 97
  10. 1011
  11. 1156
  12. 12 
  13. 13 
  14. 1425
  15. 1553
  16. 1614
  17. 1728
  18. 1830
  19. 19 
  20. 20 
  21. 2121
  22. 2216
  23. 2320
  24. 2413
  25. 2526
  26. 26 
  27. 27 
  28. 2823
  29. 2918
  30. 3021
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2010-2514

    Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to in…

  • Unscored —
    CVE-2010-2507 Public exploit Scanner template

    Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! al…

  • Unscored —
    CVE-2010-2513 Public exploit

    SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows …

  • Unscored —
    CVE-2010-2508 Public exploit

    SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to exe…

  • Unscored —
    CVE-2010-2515

    Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2 for Joomla!, when magic_quotes…

  • Unscored —
    CVE-2010-2512 Public exploit

    SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2510 Public exploit

    SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-2511 Public exploit

    SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to …

  • Unscored —
    CVE-2010-2509 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject a…

  • Unscored —
    CVE-2010-2502

    Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attack…

  • Unscored —
    CVE-2010-2503

    Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote att…

  • Unscored —
    CVE-2010-2504

    Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via H…

  • Unscored —
    CVE-2010-2505 Public exploit

    Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash)…

  • Unscored —
    CVE-2010-2506

    Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote at…

  • Unscored —
    CVE-2010-0180

    Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses world-readable permission…

  • Unscored —
    CVE-2010-1930 Public exploit

    Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (da…

  • Unscored —
    CVE-2010-1204

    Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to …

  • Unscored —
    CVE-2010-1929 Public exploit EPSS 16%

    Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dl…

  • Unscored —
    CVE-2010-2231

    Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.1…

  • Unscored —
    CVE-2010-2229

    Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 al…

  • Medium —
    CVE-2010-2230

    Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter

    The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.

    moodle/moodle wordpress Debian Packagist
  • Unscored —
    CVE-2010-2228

    Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before …

  • Unscored —
    CVE-2010-2470

    Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-rea…