CVEs published in January 2010
330 vulnerabilities, 64 critical, 3 exploited.
- adium, pidgin, fedoraproject fedora +4 more +6 moreDirectory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6...7.5 High
- ibm lotus inotesUnspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for...10.0 High
- novell imanagerStack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows...7.5 High
- sun java system web serverUnspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote...7.5 High
- sun java system web serverHeap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote...7.5 High
- sun opensolarishald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during...4.6 Medium
- adobe illustratorBuffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows...10.0 High
- powerdns recursorUnspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof...7.5 High
- powerdns recursorBuffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of...10.0 High
- liferay portalCross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers...4.3 Medium
- verbatim corporate secureVerbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent...4.6 Medium
- verbatim corporate secureVerbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit...4.6 Medium
- verbatim corporate secureVerbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords...4.6 Medium
- sandisk cruzer enterprise usbSanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows...4.6 Medium
- sandisk cruzer enterprise firmwareSanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the...4.6 Medium
- sandisk cruzer enterprise usbSanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host...4.6 Medium
- kingston datatraveler blackbox, datatraveler elite, datatraveler secure +2 moreKingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and...2.1 Low
- kingston datatraveler blackbox, datatraveler elite, datatraveler secure +2 moreKingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and...4.6 Medium
- kingston datatraveler blackbox, datatraveler elite, datatraveler secure +2 moreKingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and...2.1 Low
- mozilla firefoxThe nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox...5.0 Medium
- malcom box lxr cross referencerCross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote...4.3 Medium
- jesse smith bftpdThe bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at...5.0 Medium
- secureideas baseUnspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE)...7.5 High
- secureideas baseSQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows...7.5 High
- secureideas baseCross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security...4.3 Medium
- mediawiki mediawik, mediawiki +1 moreCross-site scripting (XSS) vulnerability in the Special:Block implementation in the...4.3 Medium
- awingsoft awakening winds3d player, awakening winds3d viewer +1 moreHeap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0...9.3 High
- cherokeeCherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via...5.0 Medium
- wowdMultiple cross-site scripting (XSS) vulnerabilities in index.html in Wowd client before 1.3.1...4.3 Medium
- transmissionbt transmission, debian linux, opensuse +2 moreDirectory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75,...8.8 High
- joomlabamboo jb simpla** DISPUTED ** SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for...7.5 High
- joomlabiblestudy com biblestudyDirectory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla!...7.5 High
- aspindir uranyumsoft listing serviceUranyumSoft Listing Service stores sensitive information under the web root with insufficient...5.0 Medium
- dbmasters db masters multimedia links directoryadmin.php in dB Masters Multimedia Links Directory 3.1.3 allows remote attackers to bypass...7.5 High
- joomla com dhforumSQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote...7.5 High
- xoops dictionarySQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote...7.5 High
- roseonlinecmsDirectory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when...9.8 Critical
- hastablog hasta blogMultiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 allow remote attackers to...4.3 Medium
- joomla com artistavenueCross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for...4.3 Medium
- facileformsCross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for...4.3 Medium
- maxdev mdforumSQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote...7.5 High
- cmstactics com beeheardSQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows...7.5 High
- qproje com qpersonelCross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2...4.3 Medium
- i-escorts directory scriptSQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote...7.5 High
- joomlabear mod joomulusMultiple cross-site scripting (XSS) vulnerabilities in the Joomulus (mod_joomulus) module 2.0 for...4.3 Medium
- phpshopCross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to...6.8 Medium
- phpshopMultiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to...7.5 High
- phpshopCross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject...4.3 Medium
- elkagroup image gallerySQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute...7.5 High
- webmin usermin, webmin +1 moreCross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows...4.3 Medium
- Show moreLoading…