CVEs published in February 2010
303 vulnerabilities, 56 critical, 2 exploited.
- samba client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4... 4.4 Medium
- greatjoomla scriptegrator plugin Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for... 6.8 Medium
- greatjoomla scriptegrator plugin Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js... 7.5 High
- softbizscripts softbiz jobs and recruitment script SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute... 7.5 High
- wikyblog Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote... 6.5 Medium
- wikyblog Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web... 5.8 Medium
- wikyblog PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote... 7.5 High
- wikyblog Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2... 4.3 Medium
- componentslab com sqlreport SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows... 7.5 High
- earl dunovant week The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for... 5.0 Medium
- mhd zaher ghaibeh arab cart Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote... 4.3 Medium
- mhd zaher ghaibeh arab cart SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to... 7.5 High
- mhproducts ero auktion SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to... 7.5 High
- mhproducts php auktion pro SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute... 7.5 High
- systemsoftware auktionshaus gelb SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to... 7.5 High
- systemsoftware erotik auktionshaus SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute... 7.5 High
- microsoft windows 2000, windows 7, windows server 2008 +3 more +5 more An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista,... 4.7 Medium
- microsoft windows media player Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to... 4.3 Medium
- moinmo moinmoin MoinMoin has improper default configuration 7.5 High
- microsoft sharepoint server _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with... 3.5 Low
- ibm lotus quickr, lotus web content management, lotus workplace web content management +1 more +3 more Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content... 6.8 Medium
- ibm lotus quickr, lotus web content management, lotus workplace web content management +1 more +3 more Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web... 4.3 Medium
- datev base system The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in... 10.0 High
- moinmo moinmoin MoinMoin improper sanitizes user profiles 7.5 High
- moinmo moinmoin MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration 6.8 Medium
- moinmo moinmoin MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set 5.0 Medium
- linux kernel The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12... 7.8 High
- novell edirectory The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes... 7.5 High
- novell edirectory Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows... 9.0 High
- novell edirectory Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows... 9.0 High
- ngircd The (1) Conn_GetCipherInfo and (2) Conn_UsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and... 2.6 Low
- zenoss Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions... 6.8 Medium
- zenoss Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and... 6.5 Medium
- aspcodecms aspcode cms Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build... 6.8 Medium
- aspcodecms aspcode cms SQL injection vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly... 7.5 High
- limny Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to... 6.8 Medium
- sun java system directory server Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server... 5.0 Medium
- tibco administrator Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when... 6.0 Medium
- todd miller sudo sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group... 4.4 Medium
- fedorahosted cronie, paul vixie vixie cron +1 more The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron)... 3.3 Low
- uzbl The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl... 7.5 High
- sun one web server Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows... 5.0 Medium
- sun one web server Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6... 5.0 Medium
- timeclock-software employee timeclock software Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0... 6.8 Medium
- subexworld nikira fraud management system Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud... 4.3 Medium
- avast antivirus home, antivirus professional +1 more Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000... 7.2 High
- ibm websphere portal Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5... 4.3 Medium
- emc homebase server Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3... 9.3 High
- systemtap stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option,... 7.5 High
- becauseinter bournal Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the... 2.1 Low
- Show olderLoading…