Skip to content
OpenAdvisories

Archive

June 2010

Vulnerabilities first published in this month (UTC), newest first.

← May 2010 2010 / June July 2010 →
  1. 118
  2. 214
  3. 317
  4. 4 
  5. 5 
  6. 6 
  7. 723
  8. 836
  9. 97
  10. 1011
  11. 1156
  12. 12 
  13. 13 
  14. 1425
  15. 1553
  16. 1614
  17. 1728
  18. 1830
  19. 19 
  20. 20 
  21. 2121
  22. 2216
  23. 2320
  24. 2413
  25. 2526
  26. 26 
  27. 27 
  28. 2823
  29. 2918
  30. 3021
All Critical High Medium Low Exploited only Public exploit

490 results · Feed

  • Medium 6.1
    CVE-2010-2422

    Plone Cross-site Scripting vulnerability in PortalTransforms

    Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.

    plone PyPI
  • High —
    CVE-2010-1632 EPSS 22%

    Improper Input Validation in Apache Axis2

    Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, a…

    org.apache.axis2.wso2:axis2 Maven
  • Unscored —
    CVE-2010-1752

    Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to …

  • Unscored —
    CVE-2010-1755

    Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, wh…

  • Unscored —
    CVE-2010-1775

    Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attacker…

  • Unscored —
    CVE-2010-1751

    Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which mig…

  • Unscored —
    CVE-2010-1754

    Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjun…

  • Unscored —
    CVE-2010-1753

    ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2010-1757

    WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on conten…

  • Unscored —
    CVE-2010-1407

    WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method i…

  • Unscored —
    CVE-2010-1756

    The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless netwo…

  • Unscored —
    CVE-2010-2432

    The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not p…

    cups Debian
  • Unscored —
    CVE-2010-2431

    The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary fil…

    cups Debian
  • Unscored —
    CVE-2010-1638

    The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan intern…

  • Unscored —
    CVE-2010-1637

    The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restricti…

  • Unscored —
    CVE-2010-2420

    Multiple unspecified vulnerabilities in Fenrir Inc. ActiveGeckoBrowser 1.0.0 and 1.0.5 alpha, a module for the Sleipnir…

  • Unscored —
    CVE-2010-2421

    Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extre…

  • Unscored —
    CVE-2010-2358 Public exploit

    PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc i…

  • Unscored —
    CVE-2010-2356 Public exploit

    Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to injec…

  • Unscored —
    CVE-2010-2355 Public exploit

    Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject ar…

  • Unscored —
    CVE-2010-2354 Public exploit

    SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-2359 Public exploit

    SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-2357 Public exploit

    SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-1958

    Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal a…

  • Unscored —
    CVE-2010-2353

    The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform acces…

  • Unscored —
    CVE-2010-2349 Public exploit

    H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which trig…

  • Unscored —
    CVE-2010-2348 Public exploit

    Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2010-2352

    The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupa…

  • Unscored —
    CVE-2010-2351 Public exploit EPSS 16%

    Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows rem…

  • Unscored —
    CVE-2010-2347

    The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 thro…

  • Unscored —
    CVE-2010-2350

    Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (cr…

    ziproxy Debian
  • Unscored —
    CVE-2010-0542

    The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check th…

    cups Debian
  • Unscored —
    CVE-2010-1168

    The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reva…

    perl Debian
  • Medium —
    CVE-2010-1622 Public exploit EPSS 52%

    Improper Control of Generation of Code ('Code Injection') in Spring Framework

    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

    org.springframework:spring Maven
  • Unscored —
    CVE-2010-2345

    Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack …

  • Unscored —
    CVE-2010-2344

    Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inje…

  • Unscored —
    CVE-2010-2343 Public exploit EPSS 37%

    Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-2342 Public exploit

    SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attacker…

  • Unscored —
    CVE-2010-2340 Public exploit

    SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attacke…

  • Unscored —
    CVE-2010-2341 Public exploit

    PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta a…