Skip to content
OpenAdvisories

Archive

July 2010

Vulnerabilities first published in this month (UTC), newest first.

  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 

120 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4957 Public exploit

    Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary fil…

  • High 7.8
    CVE-2010-2568 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…

    KEV Sep 15, 2022
  • Unscored —
    CVE-2009-4939 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4940 Public exploit

    SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-4936 Public exploit

    Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-0266 Public exploit EPSS 51%

    Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR…

  • Unscored —
    CVE-2010-0916 Public exploit

    Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availab…

  • Unscored —
    CVE-2010-0904 Public exploit EPSS 51%

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vect…

  • Unscored —
    CVE-2010-2370 Public exploit

    Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 …

  • Unscored —
    CVE-2010-2382 Public exploit

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via…

  • Unscored —
    CVE-2010-2375 Public exploit

    Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server compone…

  • Unscored —
    CVE-2010-2384 Public exploit

    Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unk…

  • Unscored —
    CVE-2010-2383 Public exploit

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality…

  • Unscored —
    CVE-2010-2008 Public exploit

    MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (serv…

  • Unscored —
    CVE-2010-2693 Public exploit

    FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, wh…

  • Unscored —
    CVE-2010-2714 Public exploit

    SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-2715 Public exploit

    Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arb…

  • Unscored —
    CVE-2010-2716 Public exploit

    Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the i…

  • Unscored —
    CVE-2010-2721 Public exploit

    SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-2720 Public exploit

    SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers t…

  • Unscored —
    CVE-2010-2719 Public exploit

    SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers t…

  • Medium —
    CVE-2010-2227 Public exploit EPSS 55%

    Apache Tomcat does not properly handle an invalid Transfer-Encoding header

    Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafte…

  • Unscored —
    CVE-2010-2700 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allo…

  • Unscored —
    CVE-2010-2698 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inj…

  • Unscored —
    CVE-2010-2697 Public exploit

    Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitr…

  • Unscored —
    CVE-2010-2696 Public exploit

    SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-2694 Public exploit

    SQL injection vulnerability in the redSHOP Component (com_redshop) 1.0 for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2010-2699 Public exploit

    SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote att…

  • Unscored —
    CVE-2010-2701 Public exploit

    Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via (1) t…

  • Unscored —
    CVE-2010-0832 Public exploit

    pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules befor…

  • Unscored —
    CVE-2010-2683 Public exploit

    SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-2689 Public exploit

    SQL injection vulnerability in cont_form.php in Internet DM WebDM CMS allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-2685 Public exploit

    siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote atta…

  • Unscored —
    CVE-2010-2680 Public exploit Scanner template

    Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla!…

  • Unscored —
    CVE-2010-2688 Public exploit

    SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-2684 Public exploit

    SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2690 Public exploit

    SQL injection vulnerability in the JOOFORGE Gamesbox (com_gamesbox) component 1.0.2, and possibly earlier, for Joomla! …

  • Unscored —
    CVE-2010-2691 Public exploit

    Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-2682 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote …

  • Unscored —
    CVE-2010-2687 Public exploit

    SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitra…