CVEs published in February 2010
303 vulnerabilities, 56 critical, 2 exploited.
- becauseinter bournalBournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on...3.3 Low
- ca ehealth performance managerCross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x,...2.6 Low
- todd miller sudosudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a...6.9 Medium
- pidgingtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- gnome screensavergnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking...4.0 Medium
- pidginlibpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does...4.3 Medium
- gnome screensavergnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables...5.6 Medium
- portwise ssl vpnCross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote...4.3 Medium
- netfortris trixboxSQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4...7.5 High
- newgensoft omnidocsSQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote...7.5 High
- wampserverCross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers...4.3 Medium
- videosearchscript proCross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote...4.3 Medium
- dynamicsoft wsc cmsSQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote...7.5 High
- ilya ivanchenko itweak uploadCross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6...3.5 Low
- digium asteriskThe design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and...5.0 Medium
- wordpressWordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other...4.0 Medium
- adobe download manager, nos microsystems getplus download manager +1 moreA certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1...9.3 High
- cisco security agentUnspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux,...7.8 High
- cisco security agentSQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0...6.5 Medium
- cisco security agentDirectory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows...6.8 Medium
- symantec client security, norton internet security, norton 360 +1 more +3 moreBuffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton...9.3 High
- symantec im managerCross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before...4.3 Medium
- joomlaworks jw allvideosDirectory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos ...5.0 Medium
- basic-cmsCross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers...4.3 Medium
- percha com perchagallerySQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for...7.5 High
- commodityrentals trade manager scriptSQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows...7.5 High
- iptechinside com jquarksSQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly...7.5 High
- jtl-software jtl-shopSQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute...7.5 High
- commodityrentals video games rentalsSQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote...7.5 High
- zeuscmsZeusCMS 0.2 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- zeuscmsDirectory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include...7.5 High
- hyleos chemviewMultiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control ...9.3 High
- katalog.hurricane katalog stron hurricanePHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3...6.8 Medium
- katalog.hurricane katalog stron hurricaneSQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier,...7.5 High
- onnogroen com webeecommentMultiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment)...4.3 Medium
- onnogroen com webeecommentSQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2...7.5 High
- weberr com rwcardsDirectory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for...5.0 Medium
- bgsvetionik bgs cmsCross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote...4.3 Medium
- 2enetworx statcountexStatCounteX 3.1 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- copperleaf photologSQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly...7.5 High
- webmastersite wsn guestSQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute...7.5 High
- michalin kr media pogodny cmsSQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to...7.5 High
- geccbbliteMultiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 allow remote attackers to...4.3 Medium
- iptechinside com jquarksUnspecified vulnerability in the IP-Tech JQuarks (com_jquarks) Component before 0.2.4 for Joomla!...5.0 Medium
- opensuseopenSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows...4.6 Medium
- mit kerberos, kerberos 5 +1 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha,...7.8 High
- typo3Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows...5.1 Medium
- adobe acrobat, reader and acrobat, acrobat reader +2 moreUnspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1...7.8 High
- mozilla firefox, seamonkey +1 moreThe Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and...10.0 High
- novell edirectoryUnspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote...5.0 Medium
- Show moreLoading…