Skip to content
OpenAdvisories

Archive

June 2010

Vulnerabilities first published in this month (UTC), newest first.

← May 2010 2010 / June July 2010 →
  1. 118
  2. 214
  3. 317
  4. 4 
  5. 5 
  6. 6 
  7. 723
  8. 836
  9. 97
  10. 1011
  11. 1156
  12. 12 
  13. 13 
  14. 1425
  15. 1553
  16. 1614
  17. 1728
  18. 1830
  19. 19 
  20. 20 
  21. 2121
  22. 2216
  23. 2320
  24. 2413
  25. 2526
  26. 26 
  27. 27 
  28. 2823
  29. 2918
  30. 3021
All Critical High Medium Low Exploited only Public exploit

133 results · Clear filters · Feed

  • Unscored —
    CVE-2010-2282 Public exploit

    Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication…

  • Medium —
    CVE-2010-2273 Public exploit

    Cross-Site Scripting in dojo

    Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly …

    dojo dojo Debian npm
  • Unscored —
    CVE-2010-2275 Public exploit

    Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote a…

    dojo Debian
  • Unscored —
    CVE-2010-1885 Public exploit EPSS 71%

    The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server…

  • Unscored —
    CVE-2010-2265 Public exploit EPSS 21%

    Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows He…

  • Unscored —
    CVE-2010-2263 Public exploit EPSS 72%

    nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code o…

  • Unscored —
    CVE-2010-2266 Public exploit EPSS 22%

    nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal seque…

  • Unscored —
    CVE-2010-1759 Public exploit EPSS 16%

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before…

  • Unscored —
    CVE-2009-4892 Public exploit

    SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-4888 Public exploit

    Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-4886 Public exploit

    Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2009-4889 Public exploit

    SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers t…

  • Unscored —
    CVE-2009-4883 Public exploit

    SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-1960 Public exploit EPSS 67%

    Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.…

  • Unscored —
    CVE-2010-1961 Public exploit EPSS 67%

    Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows rem…

  • Unscored —
    CVE-2010-1931 Public exploit

    SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows r…

  • Unscored —
    CVE-2010-2259 Public exploit Scanner template EPSS 18%

    Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to incl…

  • Unscored —
    CVE-2010-2257 Public exploit

    SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to …

  • Unscored —
    CVE-2010-2256 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attack…

  • Unscored —
    CVE-2010-2254 Public exploit

    SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-2255 Public exploit

    SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfs…

  • Unscored —
    CVE-2010-0822 Public exploit EPSS 70%

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML …

  • Unscored —
    CVE-2010-0824 Public exploit EPSS 22%

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute…

  • Unscored —
    CVE-2010-1247 Public exploit EPSS 22%

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an E…

  • Unscored —
    CVE-2010-1246 Public exploit EPSS 25%

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an…

  • Unscored —
    CVE-2010-1248 Public exploit EPSS 27%

    Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-1245 Public exploit EPSS 22%

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML Fi…

  • High 7.8
    CVE-2010-1297 Exploited Public exploit EPSS 83%

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2010-1636 Public exploit

    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32…

  • Unscored —
    CVE-2010-2159 Public exploit

    Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute a…

  • Unscored —
    CVE-2010-2156 Public exploit EPSS 76%

    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)…

    isc-dhcp Debian
  • Unscored —
    CVE-2010-2154 Public exploit

    Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote…

  • Unscored —
    CVE-2010-2153 Public exploit

    Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 a…

  • Unscored —
    CVE-2010-2146 Public exploit

    PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2010-2143 Public exploit

    Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files an…

  • Unscored —
    CVE-2010-2147 Public exploit

    Cross-site scripting (XSS) vulnerability in the My Car (com_mycar) component 1.0 for Joomla! allows remote attackers to…

  • Unscored —
    CVE-2010-2144 Public exploit

    Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers…

  • Unscored —
    CVE-2010-2148 Public exploit

    SQL injection vulnerability in the My Car (com_mycar) component 1.0 for Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-2141 Public exploit

    SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-2142 Public exploit

    SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via t…