Archive
June 2010
Vulnerabilities first published in this month (UTC), newest first.
133 results · Clear filters · Feed
-
Unscored —CVE-2010-2354 Public exploit
SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary …
-
Unscored —CVE-2010-2359 Public exploit
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arb…
-
Unscored —CVE-2010-2357 Public exploit
SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute ar…
-
Unscored —CVE-2010-2349 Public exploit
H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which trig…
-
Unscored —CVE-2010-2348 Public exploit
Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execut…
-
Unscored —
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows rem…
-
Medium —
Improper Control of Generation of Code ('Code Injection') in Spring Framework
SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
-
Unscored —
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arb…
-
Unscored —CVE-2010-2342 Public exploit
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attacker…
-
Unscored —CVE-2010-2340 Public exploit
SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —CVE-2010-2341 Public exploit
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta a…
-
Unscored —CVE-2010-2338 Public exploit
Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitra…
-
Unscored —CVE-2010-2336 Public exploit
index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within th…
-
Unscored —
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2010-2329 Public exploit
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist e…
-
Unscored —CVE-2010-2334 Public exploit
Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 2…
-
Unscored —CVE-2010-2331 Public exploit
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2010-2335 Public exploit
SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote a…
-
Unscored —CVE-2010-2332 Public exploit
Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attacker…
-
Unscored —
LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scri…
-
Unscored —
Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafte…
-
Unscored —
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as…
-
Unscored —CVE-2010-1748 Public exploit
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS …
-
Unscored —
Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers …
-
Unscored —CVE-2010-2314 Public exploit
PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucl…
-
Unscored —CVE-2010-2319 Public exploit
SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2010-2316 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to …
-
Unscored —
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.…
-
Unscored —CVE-2010-2317 Public exploit
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-2313 Public exploit
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_q…
-
Unscored —CVE-2010-2315 Public exploit
PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execu…
-
Unscored —
Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via …
-
Unscored —
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary co…
-
Unscored —
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firm…
-
Unscored —CVE-2010-2311 Public exploit
Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary…
-
Unscored —
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
-
Unscored —CVE-2010-2312 Public exploit
SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to exe…
-
Unscored —
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remot…
-
Unscored —CVE-2010-2300 Public exploit
Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Go…
-
Unscored —
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally…