Skip to content
OpenAdvisories

Archive

June 2010

Vulnerabilities first published in this month (UTC), newest first.

133 results · Clear filters · Feed

  • Unscored —
    CVE-2010-1205 Public exploit EPSS 43%

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, migh…

  • Unscored —
    CVE-2010-2201 Public exploit EPSS 14%

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arb…

  • Unscored —
    CVE-2010-2204 Public exploit EPSS 13%

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, a…

  • Unscored —
    CVE-2010-2168 Public exploit EPSS 14%

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arb…

  • Unscored —
    CVE-2008-7257 Public exploit EPSS 12%

    CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series d…

  • Unscored —
    CVE-2010-2507 Public exploit Scanner template

    Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! al…

  • Unscored —
    CVE-2010-2513 Public exploit

    SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows …

  • Unscored —
    CVE-2010-2508 Public exploit

    SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to exe…

  • Unscored —
    CVE-2010-2512 Public exploit

    SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2510 Public exploit

    SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-2511 Public exploit

    SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to …

  • Unscored —
    CVE-2010-2509 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject a…

  • Unscored —
    CVE-2010-2505 Public exploit

    Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash)…

  • Unscored —
    CVE-2010-1930 Public exploit

    Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (da…

  • Unscored —
    CVE-2010-1929 Public exploit EPSS 16%

    Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dl…

  • Unscored —
    CVE-2010-2461 Public exploit

    SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-2462 Public exploit

    SQL injection vulnerability in withdraw_money.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-2463 Public exploit

    Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2010-2458 Public exploit

    Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attack…

  • Unscored —
    CVE-2010-2459 Public exploit

    SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2010-2464 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla…

  • Unscored —
    CVE-2010-2456 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read …

  • Unscored —
    CVE-2010-2457 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2010-2460 Public exploit

    SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers…

  • Unscored —
    CVE-2009-4908 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2009-4907 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication…

  • Unscored —
    CVE-2009-4905 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to…

  • Unscored —
    CVE-2009-4906 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the…

  • Unscored —
    CVE-2010-2437 Public exploit

    Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote…

  • Unscored —
    CVE-2010-2435 Public exploit

    Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characte…

  • Unscored —
    CVE-2010-2438 Public exploit

    SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang p…

  • Unscored —
    CVE-2010-2440 Public exploit

    Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers t…

  • Unscored —
    CVE-2010-2439 Public exploit

    Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list…

  • Unscored —
    CVE-2010-2436 Public exploit

    SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers t…

  • Unscored —
    CVE-2010-2433 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow…

  • Unscored —
    CVE-2010-1199 Public exploit EPSS 11%

    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,…

  • Unscored —
    CVE-2010-2426 Public exploit EPSS 12%

    Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably ear…

  • Unscored —
    CVE-2010-2358 Public exploit

    PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc i…

  • Unscored —
    CVE-2010-2356 Public exploit

    Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to injec…

  • Unscored —
    CVE-2010-2355 Public exploit

    Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject ar…