Skip to content
OpenAdvisories

Archive

July 2010

Vulnerabilities first published in this month (UTC), newest first.

← June 2010 2010 / July August 2010 →
  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 
All Critical High Medium Low Exploited only Public exploit

343 results · Feed

  • Unscored —
    CVE-2009-4938

    SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote atta…

  • Unscored —
    CVE-2009-4939 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4942

    Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of …

  • Unscored —
    CVE-2009-4943

    index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with a…

  • Unscored —
    CVE-2009-4945

    AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obta…

  • Unscored —
    CVE-2009-4940 Public exploit

    SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-4936 Public exploit

    Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-4944

    Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-4937

    Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-4941

    Cross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2010-1972

    The default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia) allows remote attackers …

  • Unscored —
    CVE-2010-1766

    Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCor…

  • Unscored —
    CVE-2010-1969

    Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote …

  • Unscored —
    CVE-2010-1973

    Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, a…

  • Unscored —
    CVE-2010-2667

    Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 all…

  • Unscored —
    CVE-2010-2056

    GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

    gv Debian
  • Unscored —
    CVE-2010-2055

    Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to…

    ghostscript Debian
  • Unscored —
    CVE-2010-2427

    VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecifi…

  • Unscored —
    CVE-2010-2771

    solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in …

  • Unscored —
    CVE-2009-4897

    Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or …

    ghostscript Debian
  • Unscored —
    CVE-2010-0266 Public exploit EPSS 51%

    Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR…

  • Unscored —
    CVE-2010-0814 EPSS 23%

    The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not prop…

  • Unscored —
    CVE-2010-1971

    Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote a…

  • Unscored —
    CVE-2010-1970

    Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify …

  • Unscored —
    CVE-2010-1966

    Unspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows local users to read or m…

  • Unscored —
    CVE-2010-1881 EPSS 20%

    The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3…

  • Unscored —
    CVE-2010-1967

    Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify …

  • Unscored —
    CVE-2010-1968

    Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote a…

  • Unscored —
    CVE-2010-1965

    Unspecified vulnerability in HP Insight Orchestration for Windows before 6.1 allows remote attackers to read or modify …

  • Unscored —
    CVE-2010-0916 Public exploit

    Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availab…

  • Unscored —
    CVE-2010-0915

    Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6…

  • Unscored —
    CVE-2010-0904 Public exploit EPSS 51%

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vect…

  • Unscored —
    CVE-2010-0908

    Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 allows remot…

  • Unscored —
    CVE-2010-0873

    Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote atta…

  • Unscored —
    CVE-2010-0899

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality,…

  • Unscored —
    CVE-2010-0901

    Unspecified vulnerability in the Export component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.…

  • Unscored —
    CVE-2010-0892

    Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2.0.00.27 allows remote atta…

  • Unscored —
    CVE-2010-0910

    Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 all…

  • Unscored —
    CVE-2010-0914

    Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown v…

  • Unscored —
    CVE-2010-0907

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity…