Skip to content
OpenAdvisories

Archive

1 December 2010

Vulnerabilities first published on this day (UTC), newest first.

← November 2010 2010 / December /1 January 2011 →
  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2008-7267 Public exploit

    SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-7269 Public exploit Scanner template

    Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arb…

  • Unscored —
    CVE-2008-7268

    The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action param…

  • Unscored —
    CVE-2010-4365 Public exploit

    SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote att…

  • Unscored —
    CVE-2010-4364

    DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows re…

  • Unscored —
    CVE-2010-4360 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4356 Public exploit

    SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-4357 Public exploit

    SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-4359 Public exploit

    SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-4363

    Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disa…

  • Unscored —
    CVE-2010-4362 Public exploit

    Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-4361

    Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2010-4355

    Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allow…

  • Unscored —
    CVE-2010-4366 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote …

  • Unscored —
    CVE-2010-4358

    Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to…

  • Unscored —
    CVE-2009-5019 Public exploit

    Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote a…