Skip to content
OpenAdvisories

Archive

24 September 2010

Vulnerabilities first published on this day (UTC), newest first.

← August 2010 2010 / September /24 October 2010 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 726
  8. 815
  9. 927
  10. 1018
  11. 11 
  12. 12 
  13. 138
  14. 1410
  15. 1525
  16. 1624
  17. 1719
  18. 18 
  19. 19 
  20. 2019
  21. 2110
  22. 2216
  23. 2312
  24. 2423
  25. 25 
  26. 26 
  27. 27 
  28. 286
  29. 2914
  30. 309
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • High —
    CVE-2010-3604

    powermail extension for TYPO3 vulnerable to SQL Injection

    SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    in2code/powermail Packagist
  • Unscored —
    CVE-2010-3607

    Cross-site scripting (XSS) vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authe…

  • Unscored —
    CVE-2010-3606

    Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote em…

  • Unscored —
    CVE-2010-3605

    Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers…

  • Unscored —
    CVE-2010-3608 Public exploit

    Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2010-3602 Public exploit

    Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers …

  • Unscored —
    CVE-2010-3603 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2…

  • Unscored —
    CVE-2010-3601 Public exploit

    SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-3081 Public exploit

    The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bi…

  • Unscored —
    CVE-2010-1825

    Use-after-free vulnerability in WebKit, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a …

  • Unscored —
    CVE-2010-1772

    Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome befor…

  • Unscored —
    CVE-2010-1824

    Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome…

  • Unscored —
    CVE-2010-1767

    Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r570…

  • Unscored —
    CVE-2010-1773

    Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as …

  • Unscored —
    CVE-2010-1823

    Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attacke…

  • Unscored —
    CVE-2010-3304

    The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configuration…

    dovecot Debian
  • Unscored —
    CVE-2010-3283

    Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users…

  • Unscored —
    CVE-2010-3306 Public exploit

    Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers …

    weborf Debian
  • Unscored —
    CVE-2010-3261

    Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read uns…

  • Unscored —
    CVE-2010-3284

    Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to obtain sensitive…

  • Unscored —
    CVE-2010-3294

    Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP a…

  • Unscored —
    CVE-2010-3285

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a…

  • Medium 6.1
    CVE-2010-2491

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program.

    roundup PyPI