Skip to content
OpenAdvisories

Archive

22 July 2010

Vulnerabilities first published on this day (UTC), newest first.

← June 2010 2010 / July /22 August 2010 →
  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 
All Critical High Medium Low Exploited only Public exploit

34 results · Feed

  • Unscored —
    CVE-2009-4954

    SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 al…

  • Unscored —
    CVE-2009-4948

    Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2009-4956

    Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows rem…

  • Unscored —
    CVE-2009-4946

    Directory traversal vulnerability in the Messaging (com_messaging) component before 1.5.1 for Joomla! allows remote att…

  • Unscored —
    CVE-2009-4951

    Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3…

  • Unscored —
    CVE-2009-4947

    SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers…

  • Unscored —
    CVE-2009-4957 Public exploit

    Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2009-4952

    Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows r…

  • Unscored —
    CVE-2009-4949

    SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute ar…

  • Unscored —
    CVE-2009-4953

    Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 al…

  • Unscored —
    CVE-2009-4955

    SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2009-4950

    SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 fo…

  • Unscored —
    CVE-2010-2772

    Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end …

  • High 7.8
    CVE-2010-2568 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…

    KEV Sep 15, 2022
  • Unscored —
    CVE-2009-4938

    SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote atta…

  • Unscored —
    CVE-2009-4939 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4942

    Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of …

  • Unscored —
    CVE-2009-4943

    index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with a…

  • Unscored —
    CVE-2009-4945

    AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obta…

  • Unscored —
    CVE-2009-4940 Public exploit

    SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-4936 Public exploit

    Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-4944

    Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-4937

    Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-4941

    Cross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2010-1972

    The default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia) allows remote attackers …

  • Unscored —
    CVE-2010-1766

    Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCor…

  • Unscored —
    CVE-2010-1969

    Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote …

  • Unscored —
    CVE-2010-1973

    Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, a…

  • Unscored —
    CVE-2010-2667

    Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 all…

  • Unscored —
    CVE-2010-2056

    GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

    gv Debian
  • Unscored —
    CVE-2010-2055

    Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to…

    ghostscript Debian
  • Unscored —
    CVE-2010-2427

    VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecifi…

  • Unscored —
    CVE-2010-2771

    solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in …

  • Unscored —
    CVE-2009-4897

    Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or …

    ghostscript Debian