Skip to content
OpenAdvisories

Archive

2 July 2010

Vulnerabilities first published on this day (UTC), newest first.

← June 2010 2010 / July /2 August 2010 →
  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2004-2769

    Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidde…

  • Unscored —
    CVE-2010-2619

    Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops kernel, allows guest users …

  • Unscored —
    CVE-2010-2623 Public exploit

    SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute…

  • Unscored —
    CVE-2010-2624 Public exploit

    Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-2626 Public exploit EPSS 13%

    index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharact…

  • Unscored —
    CVE-2010-2622 Public exploit

    SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute…

  • Unscored —
    CVE-2010-2620 Public exploit EPSS 30%

    Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIS…

  • Unscored —
    CVE-2010-2625

    Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, a…

  • Unscored —
    CVE-2010-2621 Public exploit EPSS 11%

    The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allow…

  • Unscored —
    CVE-2010-2627 Public exploit

    Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) …

  • Medium 6.1
    CVE-2009-4924

    Cross-site Scripting in python-cjson

    Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.

    python-cjson PyPI
  • Medium —
    CVE-2010-1666

    Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

    Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the c…

    python-cjson PyPI
  • Unscored —
    CVE-2010-2549 Public exploit

    Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and…

  • Medium 6.1
    CVE-2010-2480

    Mako contains Cross-site Scripting vulnerability

    Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLo…

    mako mako Debian PyPI