CVEs published in February 2010
303 vulnerabilities, 56 critical, 2 exploited.
- squid-cache squidThe htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7...5.0 Medium
- k5n webcalendarCross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to...6.8 Medium
- linux kernel, canonical ubuntu linux, opensuse +2 moreThe futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not...4.9 Medium
- linux kernelThe wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not...2.1 Low
- adobe air, flash player +1 moreAdobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to...4.3 Medium
- adobe acrobat, air, flash player +1 more +3 moreCross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130,...6.8 Medium
- juniper odyssey access clientStack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used...10.0 High
- adobe blazeds, coldfusion, flex data services +2 more +4 moreUnspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0,...6.5 Medium
- k5n webcalendarMultiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other...6.8 Medium
- k5n webcalendarMultiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions...4.3 Medium
- jevents search pluginSQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in...7.5 High
- will estes flexUnspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown...7.5 High
- citrix xenserverUnspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local...4.6 Medium
- parkviewconsultants com simplefaqSQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for...7.5 High
- eicrasoft eicra car rental-scriptMultiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the...7.5 High
- evernewscripts free joke scriptSQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote...7.5 High
- netpbmStack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context...7.5 High
- analogx simpleserver wwwDirectory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to...10.0 High
- hp dreamscreenUnspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when...4.3 Medium
- qemuBuffer overflow in the usb_host_handle_control function in the USB passthrough handling...7.2 High
- linux kernelThe do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a...4.9 Medium
- linux kernelThe pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM...6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64...4.7 Medium
- kvm qumranet kvmThe x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does...4.1 Medium
- debian linux, linux kernel +1 moreThe x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level...6.5 Medium
- debian linux, linux kernel +1 moreThe Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of...4.6 Medium
- apache openoffice, canonical ubuntu linux, debian linux +2 moreOpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for...9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 morefilter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a...9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreInteger underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote...9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl...9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreInteger overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in...9.3 High
- gnome screensavergnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle...7.2 High
- gnome screensavergnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting...7.2 High
- gnome screensavergnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking...7.2 High
- myshell evalsmsiCross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers...4.3 Medium
- myshell evalsmsievalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with...7.5 High
- myshell evalsmsiCross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers...4.3 Medium
- myshell evalsmsiSQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute...7.5 High
- arwscripts fonts scriptDirectory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote...5.0 Medium
- dmanager documentmanagerUnspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors,...7.5 High
- baalsystems baal systemsMultiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow...7.5 High
- webguerilla com photoblogMultiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla!...7.5 High
- novaboardSQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute...7.5 High
- novaboardSQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute...7.5 High
- sterlitetechnologies sam300 ax routerCross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX...4.3 Medium
- enhancesoft osticketCross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows...3.5 Low
- enhancesoft osticketSQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote...7.5 High
- hp network node managerUnspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows...10.0 High
- cisco ironport encryption appliance, ironport postx +1 moreUnspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance...10.0 High
- Show moreLoading…