Archive
July 2010
Vulnerabilities first published in this month (UTC), newest first.
120 results · Clear filters · Feed
-
Unscored —CVE-2010-2681 Public exploit
PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execu…
-
Unscored —CVE-2009-4932 Public exploit
Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (applicatio…
-
Unscored —CVE-2009-4926 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote …
-
Unscored —CVE-2009-4933 Public exploit
Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-4934 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-4925 Public exploit
Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16,…
-
Unscored —CVE-2009-4935 Public exploit
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-4927 Public exploit
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS coo…
-
Unscored —CVE-2009-4929 Public exploit
admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attacke…
-
Unscored —CVE-2010-2670 Public exploit
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arb…
-
Unscored —CVE-2010-2674 Public exploit
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-2679 Public exploit
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2010-2677 Public exploit
PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is di…
-
Unscored —CVE-2010-2675 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject …
-
Unscored —CVE-2010-2669 Public exploit
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacke…
-
Unscored —CVE-2010-2673 Public exploit
SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2010-2676 Public exploit
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attacker…
-
Unscored —CVE-2010-2655 Public exploit
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module…
-
Unscored —CVE-2010-2654 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmwa…
-
Unscored —CVE-2010-2656 Public exploit
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before…
-
Unscored —CVE-2010-2630 Public exploit
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that h…
-
Unscored —CVE-2010-2631 Public exploit
LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly h…
-
Unscored —CVE-2010-1327 Public exploit
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-2482 Public exploit
LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to…
-
Unscored —CVE-2010-2623 Public exploit
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute…
-
Unscored —CVE-2010-2624 Public exploit
Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —CVE-2010-2622 Public exploit
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute…
-
Unscored —
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIS…
-
Unscored —
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allow…
-
Unscored —CVE-2010-2627 Public exploit
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) …
-
Unscored —CVE-2010-2549 Public exploit
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and…
-
Unscored —CVE-2010-2613 Public exploit
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows rem…
-
Unscored —CVE-2010-2615 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow…
-
Unscored —CVE-2010-2618 Public exploit
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is en…
-
Unscored —CVE-2010-2611 Public exploit
SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to exe…
-
Unscored —CVE-2010-2616 Public exploit
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-2610 Public exploit
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2010-2617 Public exploit
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2010-2609 Public exploit
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to ex…