CVEs published in January 2010
330 vulnerabilities, 64 critical, 3 exploited.
- viscachaMultiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow...3.5 Low
- s2sys linear emerge access control systemUnspecified vulnerability in the management console in the S2 Security Linear eMerge Access...5.0 Medium
- zenphotoSQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute...7.5 High
- sendmailsendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of...7.5 High
- zenphotoSQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled,...6.8 Medium
- zenphotoCross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5...4.3 Medium
- zenphotoCross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote...4.3 Medium
- worms-league webleagueMultiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when...6.8 Medium
- worms-league webleagueSQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute...7.5 High
- nanwich submitted byCross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal...3.5 Low
- unleashedmind img assistThe Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1...5.0 Medium
- unleashedmind img assistCross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2...2.1 Low
- quickheal antivirus plus 2009, total security 2009 +1 moreQuick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak...7.2 High
- k-factor agoracartMultiple cross-site request forgery (CSRF) vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and...6.8 Medium
- snitz communications forums 2000Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote...4.3 Medium
- rjvmedia irehearseStack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service ...5.0 Medium
- intesync miniwebCross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote...4.3 Medium
- intesync miniwebSQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to...7.5 High
- kunena forumSQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla...7.5 High
- cdmi a2 media player proStack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute...9.3 High
- viart helpdeskMultiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers...4.3 Medium
- viart cmsMultiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to...4.3 Medium
- logoshows bbsglobepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication...7.5 High
- logoshows bbsLogoshows BBS 2.0 stores sensitive information under the web root with insufficient access...5.0 Medium
- cromosoft facil helpdeskCross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil...4.3 Medium
- cromosoft facil helpdeskPHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3...6.8 Medium
- isolsoft support centerCross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows...4.3 Medium
- isolsoft support centerMultiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote...7.5 High
- bpowerhouse mini cmsSQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute...6.8 Medium
- sqlitemanagerCross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote...4.3 Medium