Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
March

CVEs published in March 2010

515 vulnerabilities, 79 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

acidcat cmsAcidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might...CVE-2010-0976Public exploit7.5 HighMarch 16, 2010
barnowlBuffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service ...CVE-2010-0793Fix available7.5 HighMarch 16, 2010
redhat enterprise linuxA certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64...CVE-2010-07296.9 MediumMarch 16, 2010
debian linux, linux kernel, redhat enterprise linux +2 moreThe gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock...CVE-2010-0727Fix available4.9 MediumMarch 16, 2010
phpThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...CVE-2010-0397Public exploitFix availableEPSS 11.5%5.0 MediumMarch 16, 2010
linux kernelThe nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX...CVE-2007-67334.7 MediumMarch 16, 2010
phpcityportalPHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers...CVE-2010-0975Public exploit7.5 HighMarch 16, 2010
phpcityportalMultiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute...CVE-2010-0974Public exploit7.5 HighMarch 16, 2010
scripteverkauf domain verkaus and auktions portalSQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal...CVE-2010-0973Public exploit7.5 HighMarch 16, 2010
g4j.laoneo com gcalendarDirectory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla!...CVE-2010-0972Public exploitEPSS 13.5%7.5 HighMarch 16, 2010
atutorMultiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated...CVE-2010-0971Public exploit2.1 LowMarch 16, 2010
jorik berkepas phpmylogonSQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute...CVE-2010-0970Public exploit7.5 HighMarch 16, 2010
nlnetlabs unboundUnbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote...CVE-2010-0969Fix available5.0 MediumMarch 16, 2010
geekhelps admpSQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to...CVE-2010-0968Public exploit7.5 HighMarch 16, 2010
geekhelps admpMultiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magic_quotes_gpc is...CVE-2010-0967Public exploit5.1 MediumMarch 16, 2010
dzcp dev\!l\'z clanportalPHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2,...CVE-2010-0966Public exploit6.8 MediumMarch 16, 2010
jevci.net jevci siparis formu scriptiJevci Siparis Formu Scripti stores sensitive information under the web root with insufficient...CVE-2010-09655.0 MediumMarch 16, 2010
media-products eros webkatalogSQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute...CVE-2010-0964Public exploit7.5 HighMarch 16, 2010
yuri d\'elia dlCross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7...CVE-2010-09634.3 MediumMarch 16, 2010
gonafish webstatcaffeSQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote...CVE-2009-47187.5 HighMarch 15, 2010
gonafish webstatcaffeMultiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote...CVE-2009-4717Public exploit4.3 MediumMarch 15, 2010
edgephp ezwebsearchCross-site scripting (XSS) vulnerability in results.php in EDGEPHP EZWebSearch allows remote...CVE-2009-47164.3 MediumMarch 15, 2010
phpscriptsnow real time currency exchangeCross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows...CVE-2009-47154.3 MediumMarch 15, 2010
alexandre amaral xoops celeparCross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote...CVE-2009-4714Public exploit4.3 MediumMarch 15, 2010
alexandre amaral xoops celeparMultiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS...CVE-2009-4713Public exploit4.3 MediumMarch 15, 2010
tukanas easyclassifieds scriptSQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0...CVE-2009-47127.5 HighMarch 15, 2010
jan bednarik cooluriSQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows...CVE-2009-47117.5 HighMarch 15, 2010
robert heel cwt resetbepasswordSQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20...CVE-2009-47107.5 HighMarch 15, 2010
dirk maiwert datamints newstickerSQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0...CVE-2009-47097.5 HighMarch 15, 2010
maximo cuadros gb fenewssubmitSQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit)...CVE-2009-47087.5 HighMarch 15, 2010
maximo cuadros gb fenewssubmitCross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter ...CVE-2009-47074.3 MediumMarch 15, 2010
sebastian winterhalder mailformCross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for...CVE-2009-47064.3 MediumMarch 15, 2010
thomas loeffler twittersearchCross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0...CVE-2009-47054.3 MediumMarch 15, 2010
typo3 ws ecardUnspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3...CVE-2009-47045.0 MediumMarch 15, 2010
typo3 ws gallerySQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier...CVE-2009-47037.5 HighMarch 15, 2010
markus barchfeld pm tourSQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3...CVE-2009-47027.5 HighMarch 15, 2010
liviu mitrofan myth downloadSQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows...CVE-2009-47017.5 HighMarch 15, 2010
skadate online dating softwareDirectory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read...CVE-2009-4700Public exploit5.0 MediumMarch 15, 2010
skadate online dating softwareMultiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to...CVE-2009-4699Public exploit4.3 MediumMarch 15, 2010
alexandre amaral xoops celeparMultiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow...CVE-2009-4698Public exploit7.5 HighMarch 15, 2010
drbd8drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets,...CVE-2010-0747Fix available7.8 HighMarch 15, 2010
pulseaudioThe pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users...CVE-2009-1299Fix available6.9 MediumMarch 15, 2010
drupal, drupal6 +1 moreDrupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain...CVE-2010-24736.5 MediumMarch 13, 2010
drupal, drupal6 +1 moreLocale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version...CVE-2010-24724.8 MediumMarch 13, 2010
drupal, drupal drupal6, debian linux +2 moredrupal6 version 6.16 has open redirectionCVE-2010-24716.1 MediumMarch 13, 2010
drupal, drupal6 +1 moreDrupal 6.x before 6.16 uses a user-supplied value in output during site installation which could...CVE-2010-22506.1 MediumMarch 13, 2010
apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...CVE-2010-00549.3 HighMarch 12, 2010
apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...CVE-2010-00539.3 HighMarch 12, 2010
apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...CVE-2010-00529.3 HighMarch 12, 2010
apple safariWebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of...CVE-2010-00514.3 MediumMarch 12, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open