Archive
July 2010
Vulnerabilities first published in this month (UTC), newest first.
343 results · Feed
-
Unscored —CVE-2010-2691 Public exploit
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbi…
-
Unscored —
Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote …
-
Unscored —CVE-2010-2687 Public exploit
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-2681 Public exploit
PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execu…
-
Unscored —CVE-2009-4932 Public exploit
Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (applicatio…
-
Unscored —CVE-2009-4926 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote …
-
Unscored —CVE-2009-4933 Public exploit
Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the twbkwbis.P_SecurityQuestion (aka Change Security Question) page in SunG…
-
Unscored —CVE-2009-4934 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-4925 Public exploit
Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16,…
-
Unscored —CVE-2009-4935 Public exploit
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Stack-based buffer overflow in Groovy Media Player 1.1.0 allows remote attackers to cause a denial of service (applicat…
-
Unscored —
PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-4927 Public exploit
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS coo…
-
Unscored —CVE-2009-4929 Public exploit
admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attacke…
-
Unscored —CVE-2010-2670 Public exploit
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arb…
-
Unscored —CVE-2010-2674 Public exploit
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-2679 Public exploit
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0 allows remote attacker…
-
Unscored —
Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-2677 Public exploit
PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is di…
-
Unscored —CVE-2010-2675 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject …
-
Unscored —CVE-2010-2669 Public exploit
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacke…
-
Unscored —
Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attacker…
-
Unscored —CVE-2010-2673 Public exploit
SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2010-2676 Public exploit
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attacker…
-
Unscored —
SQL injection vulnerability in xmap (com_xmap) component for Joomla! allows remote attackers to execute arbitrary SQL c…
-
Unscored —
IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of publi…
-
Unscored —
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-targ…
-
Unscored —
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1…
-
Unscored —
Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, whi…
-
Unscored —
Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties acc…
-
Unscored —
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to th…
-
Unscored —CVE-2010-2655 Public exploit
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module…
-
Unscored —
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses…
-
Unscored —CVE-2010-2654 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmwa…
-
Unscored —
Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem acce…
-
Unscored —CVE-2010-2656 Public exploit
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before…
-
Unscored —
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler t…