Skip to content
OpenAdvisories

Archive

July 2010

Vulnerabilities first published in this month (UTC), newest first.

← June 2010 2010 / July August 2010 →
  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 
All Critical High Medium Low Exploited only Public exploit

343 results · Feed

  • Unscored —
    CVE-2009-3762

    Unspecified vulnerability in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vect…

  • Unscored —
    CVE-2010-0081

    Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0…

  • Unscored —
    CVE-2009-3763

    Unspecified vulnerability in the Access Manager / OpenSSO component in Oracle OpenSSO Enterprise 7.1, 7, 2005Q4, and 8.…

  • Unscored —
    CVE-2009-3764

    Unspecified vulnerability in the OpenSSO component in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect i…

  • Unscored —
    CVE-2010-2008 Public exploit

    MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (serv…

  • Unscored —
    CVE-2010-2693 Public exploit

    FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, wh…

  • Unscored —
    CVE-2010-2714 Public exploit

    SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-2718

    Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote att…

  • Unscored —
    CVE-2010-2715 Public exploit

    Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arb…

  • Unscored —
    CVE-2010-2716 Public exploit

    Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the i…

  • Unscored —
    CVE-2010-2721 Public exploit

    SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-2717

    Cross-site scripting (XSS) vulnerability in manager/login.php in CruxSoftware CruxCMS 3.0, and possibly earlier, allows…

  • Unscored —
    CVE-2010-2724

    Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 fo…

  • Unscored —
    CVE-2010-2723

    Cross-site scripting (XSS) vulnerability in LISTSERV 15 and 16 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2010-2720 Public exploit

    SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers t…

  • Unscored —
    CVE-2010-2722

    Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inje…

  • Unscored —
    CVE-2010-2719 Public exploit

    SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers t…

  • Medium —
    CVE-2010-2227 Public exploit EPSS 55%

    Apache Tomcat does not properly handle an invalid Transfer-Encoding header

    Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafte…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2010-2522

    The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users t…

  • Unscored —
    CVE-2010-2523

    Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact …

  • Unscored —
    CVE-2010-2700 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allo…

  • Unscored —
    CVE-2010-2695

    Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other…

  • Unscored —
    CVE-2010-2698 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inj…

  • Unscored —
    CVE-2010-2697 Public exploit

    Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitr…

  • Unscored —
    CVE-2010-2702

    Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in mul…

  • Unscored —
    CVE-2010-2448

    znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffi…

  • Unscored —
    CVE-2010-2696 Public exploit

    SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-2694 Public exploit

    SQL injection vulnerability in the redSHOP Component (com_redshop) 1.0 for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2010-2699 Public exploit

    SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote att…

  • Unscored —
    CVE-2010-2701 Public exploit

    Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via (1) t…

  • Unscored —
    CVE-2010-0832 Public exploit

    pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules befor…

  • Unscored —
    CVE-2010-2683 Public exploit

    SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-2689 Public exploit

    SQL injection vulnerability in cont_form.php in Internet DM WebDM CMS allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-2685 Public exploit

    siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote atta…

  • Unscored —
    CVE-2010-2489

    Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARG…

  • Unscored —
    CVE-2010-2680 Public exploit Scanner template

    Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla!…

  • Unscored —
    CVE-2010-2688 Public exploit

    SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-2686

    Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attacke…

  • Unscored —
    CVE-2010-2684 Public exploit

    SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-2690 Public exploit

    SQL injection vulnerability in the JOOFORGE Gamesbox (com_gamesbox) component 1.0.2, and possibly earlier, for Joomla! …