Skip to content
OpenAdvisories

Archive

July 2010

Vulnerabilities first published in this month (UTC), newest first.

← June 2010 2010 / July August 2010 →
  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 
All Critical High Medium Low Exploited only Public exploit

343 results · Feed

  • Unscored —
    CVE-2009-4968

    SQL injection vulnerability in the Event Registration (event_registr) extension 1.0.0 and earlier for TYPO3 allows remo…

  • Unscored —
    CVE-2009-4964 Public exploit

    Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a …

  • Unscored —
    CVE-2009-4958 Public exploit

    SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to ex…

  • Unscored —
    CVE-2009-4966

    SQL injection vulnerability in the AST ZipCodeSearch (ast_addresszipsearch) extension 0.5.4 for TYPO3 allows remote att…

  • Unscored —
    CVE-2009-4959

    SQL injection vulnerability in the T3M E-Mail Marketing Tool (t3m) extension 0.2.4 and earlier for TYPO3 allows remote …

  • Unscored —
    CVE-2009-4972

    Cross-site scripting (XSS) vulnerability in index.php (aka the log in page) in SimpleID before 0.6.5 allows remote atta…

  • Unscored —
    CVE-2009-4961 Public exploit

    Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which call…

  • Unscored —
    CVE-2009-4970

    SQL injection vulnerability in the t3m_affiliate extension 0.5.0 for TYPO3 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-4971

    SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execu…

  • Unscored —
    CVE-2009-4969

    SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attack…

  • Unscored —
    CVE-2010-2858 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers …

  • Unscored —
    CVE-2010-2854

    Multiple cross-site scripting (XSS) vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc…

  • Unscored —
    CVE-2010-2844 Public exploit

    Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject…

  • Unscored —
    CVE-2010-2846 Public exploit

    Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! a…

  • Unscored —
    CVE-2010-2857 Public exploit Scanner template

    Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2010-2845 Public exploit

    SQL injection vulnerability in the QuickFAQ (com_quickfaq) component 1.0.3 for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2010-2856 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows …

  • Unscored —
    CVE-2010-2848 Public exploit

    Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfo…

  • Unscored —
    CVE-2010-2859

    news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang par…

  • Unscored —
    CVE-2010-2849

    Cross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and possibly other versions…

  • Unscored —
    CVE-2010-2852

    Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when th…

  • Unscored —
    CVE-2010-2855

    Multiple SQL injection vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc is disabled,…

  • Unscored —
    CVE-2010-2850 Public exploit

    Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions …

  • Unscored —
    CVE-2010-2847 Public exploit

    Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! all…

  • Unscored —
    CVE-2010-2851

    SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for J…

  • Unscored —
    CVE-2010-2853 Public exploit

    SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute ar…

  • Unscored —
    CVE-2009-4954

    SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 al…

  • Unscored —
    CVE-2009-4948

    Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2009-4956

    Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows rem…

  • Unscored —
    CVE-2009-4946

    Directory traversal vulnerability in the Messaging (com_messaging) component before 1.5.1 for Joomla! allows remote att…

  • Unscored —
    CVE-2009-4951

    Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3…

  • Unscored —
    CVE-2009-4947

    SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers…

  • Unscored —
    CVE-2009-4957 Public exploit

    Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2009-4952

    Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows r…

  • Unscored —
    CVE-2009-4949

    SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute ar…

  • Unscored —
    CVE-2009-4953

    Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 al…

  • Unscored —
    CVE-2009-4955

    SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2009-4950

    SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 fo…

  • Unscored —
    CVE-2010-2772

    Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end …

  • High 7.8
    CVE-2010-2568 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…

    KEV Sep 15, 2022