Skip to content
OpenAdvisories

Archive

17 September 2010

Vulnerabilities first published on this day (UTC), newest first.

← August 2010 2010 / September /17 October 2010 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 726
  8. 815
  9. 927
  10. 1018
  11. 11 
  12. 12 
  13. 138
  14. 1410
  15. 1525
  16. 1624
  17. 1719
  18. 18 
  19. 19 
  20. 2019
  21. 2110
  22. 2216
  23. 2312
  24. 2423
  25. 25 
  26. 26 
  27. 27 
  28. 286
  29. 2914
  30. 309
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2010-3466

    Cross-site scripting (XSS) vulnerability in index.php in the hosted_signup module in NetArt Media iBoutique.MALL 1.2 al…

  • Unscored —
    CVE-2010-3457 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject ar…

  • Unscored —
    CVE-2010-3460 Public exploit

    Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers…

  • Unscored —
    CVE-2010-3461 Public exploit

    SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-3463

    Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, all…

  • Unscored —
    CVE-2010-3459

    Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote…

  • Unscored —
    CVE-2010-3467 Public exploit

    SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modu…

  • Unscored —
    CVE-2010-3455

    Cross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2010-3465

    Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to …

  • Unscored —
    CVE-2010-3464

    Cross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in SantaFox 2.02, and possibly earlier…

  • Unscored —
    CVE-2010-3012

    Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to i…

  • Unscored —
    CVE-2010-3456 Public exploit

    Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to …

  • Unscored —
    CVE-2010-3462 Public exploit

    Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly…

  • Unscored —
    CVE-2010-3458 Public exploit

    SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attac…

  • Unscored —
    CVE-2010-3324 Public exploit EPSS 25%

    The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint S…

  • Unscored —
    CVE-2010-3074

    SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted …

    encfs Debian
  • Unscored —
    CVE-2010-3073 Public exploit

    SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for…

    encfs Debian
  • Unscored —
    CVE-2010-3075

    EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which …

    encfs Debian
  • Unscored —
    CVE-2010-3011

    CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitr…