Skip to content
OpenAdvisories

Archive

16 September 2010

Vulnerabilities first published on this day (UTC), newest first.

← August 2010 2010 / September /16 October 2010 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 726
  8. 815
  9. 927
  10. 1018
  11. 11 
  12. 12 
  13. 138
  14. 1410
  15. 1525
  16. 1624
  17. 1719
  18. 18 
  19. 19 
  20. 2019
  21. 2110
  22. 2216
  23. 2312
  24. 2423
  25. 25 
  26. 26 
  27. 27 
  28. 286
  29. 2914
  30. 309
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2010-3426 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows rem…

  • Unscored —
    CVE-2010-3420

    Cross-site scripting (XSS) vulnerability in Products_Results.php in PowerStore 3.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2010-3422 Public exploit

    SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-3419 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote att…

  • Unscored —
    CVE-2010-3427

    Multiple cross-site scripting (XSS) vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2010-3425 Public exploit

    Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibl…

  • Unscored —
    CVE-2010-3424

    Cross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board (I…

  • Unscored —
    CVE-2010-3423

    SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execu…

    Web / CMS
  • Unscored —
    CVE-2010-3428 Public exploit

    SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execut…

  • Unscored —
    CVE-2010-3421

    Cross-site scripting (XSS) vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions a…

  • Unscored —
    CVE-2010-3418

    Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers t…

  • Unscored —
    CVE-2010-3414

    Google Chrome before 6.0.472.59 on Mac OS X does not properly implement file dialogs, which allows attackers to cause a…

  • Unscored —
    CVE-2010-3405

    Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier a…

  • Unscored —
    CVE-2010-3416

    Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to…

  • Unscored —
    CVE-2010-3415

    Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denia…

  • Unscored —
    CVE-2010-3407 Public exploit EPSS 41%

    Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server …

  • Unscored —
    CVE-2010-3412

    Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vecto…

  • Unscored —
    CVE-2010-3417

    Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows …

  • Unscored —
    CVE-2010-3411

    Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denia…

  • Unscored —
    CVE-2010-3406

    Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system gr…

  • Unscored —
    CVE-2010-3413

    Unspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59 allows remote attacke…

  • Unscored —
    CVE-2010-3403

    Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19 allows local users, and p…

  • Unscored —
    CVE-2010-3404 Public exploit

    Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-3402

    Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other …