Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
March

CVEs published in March 2010

515 vulnerabilities, 79 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

imagoscripts deviant art cloneSQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote...CVE-2010-1070Public exploit7.5 HighMarch 23, 2010
proarcadescriptSQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to...CVE-2010-1069Public exploit7.5 HighMarch 23, 2010
netwin surgeftpMultiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6...CVE-2010-10684.3 MediumMarch 23, 2010
hasmir alic e-membresE-membres 1.0 stores sensitive information under the web root with insufficient access control,...CVE-2010-1067Public exploit5.0 MediumMarch 23, 2010
the-ghost ar web content managerAR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with...CVE-2010-1066Public exploit5.0 MediumMarch 23, 2010
lebisoft ziyaretci defteriLebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with...CVE-2010-1065Public exploit5.0 MediumMarch 23, 2010
aspindir erolife ajxgaleri vtErolife AjxGaleri VT stores sensitive information under the web root with insufficient access...CVE-2010-1064Public exploit5.0 MediumMarch 23, 2010
tejimaya openpneThe "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10...CVE-2010-10405.8 MediumMarch 23, 2010
sensesites commonsense cmsCross-site scripting (XSS) vulnerability in search.php in CommonSense CMS 5.0 allows remote...CVE-2009-47364.3 MediumMarch 23, 2010
phpkobo free real estate contact form scriptMultiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when...CVE-2010-10636.8 MediumMarch 23, 2010
phpkobo free real estate contact form scriptDirectory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate...CVE-2010-1062Public exploit6.8 MediumMarch 23, 2010
phpkobo short urlMultiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is...CVE-2010-10616.8 MediumMarch 23, 2010
phpkobo short urlDirectory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when...CVE-2010-1060Public exploit6.8 MediumMarch 23, 2010
phpkobo address book scriptDirectory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09...CVE-2010-10596.8 MediumMarch 23, 2010
phpkobo address book scriptDirectory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1...CVE-2010-1058Public exploit6.8 MediumMarch 23, 2010
phpkobo adfreelyMultiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when...CVE-2010-1057Public exploit6.8 MediumMarch 23, 2010
rockettheme com rokdownloadsDirectory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1...CVE-2010-1056Public exploitEPSS 11.4%6.8 MediumMarch 23, 2010
tufat osdateMultiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when...CVE-2010-1055Public exploit5.1 MediumMarch 23, 2010
parscmsMultiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL...CVE-2010-1054Public exploit7.5 HighMarch 23, 2010
mediawikithumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as...CVE-2010-1190Fix available4.3 MediumMarch 23, 2010
mediawikiMediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites...CVE-2010-1189Fix available5.0 MediumMarch 23, 2010
zentracking zen time trackingMultiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when...CVE-2010-1053Public exploit6.8 MediumMarch 22, 2010
alexandre dubus audistatMultiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote...CVE-2010-1052Public exploit4.3 MediumMarch 22, 2010
alexandre dubus audistatMultiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to...CVE-2010-1051Public exploit7.5 HighMarch 22, 2010
alexandre dubus audistatSQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute...CVE-2010-1050Public exploit7.5 HighMarch 22, 2010
uiga business portalMultiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute...CVE-2010-1049Public exploit7.5 HighMarch 22, 2010
uiga business portalCross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote...CVE-2010-1048Public exploit4.3 MediumMarch 22, 2010
masa2el music citySQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote...CVE-2010-1047Public exploit7.5 HighMarch 22, 2010
ryan marshall rostermainMultiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote...CVE-2010-1046Public exploit7.5 HighMarch 22, 2010
design-cars com productbookSQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla!...CVE-2010-1045Public exploit7.5 HighMarch 22, 2010
manageengine oputilsSQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to...CVE-2010-1044Public exploit7.5 HighMarch 22, 2010
jaxcmsDirectory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include...CVE-2010-1043Public exploit7.5 HighMarch 22, 2010
microsoft windows media playerMicrosoft Windows Media Player 11 does not properly perform colorspace conversion, which allows...CVE-2010-1042Public exploitEPSS 10.3%4.3 MediumMarch 22, 2010
ibm db2 content managerUnspecified vulnerability in the single sign-on functionality in the Web Services implementation...CVE-2010-104110.0 HighMarch 22, 2010
mozilla seamonkey, thunderbird +1 moreMozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a...CVE-2010-01634.3 MediumMarch 22, 2010
mozilla seamonkey, thunderbird +1 moreThe nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2...CVE-2010-01614.3 MediumMarch 22, 2010
georg greve spamassassin milter pluginThe mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using...CVE-2010-1132Public exploitFix available9.3 HighMarch 22, 2010
ikiwikiCross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53...CVE-2010-1195Fix available4.3 MediumMarch 20, 2010
apple safari, google chrome +1 moreStack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple...CVE-2010-1029Public exploitEPSS 11.7%5.0 MediumMarch 19, 2010
mozilla firefoxInteger overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder...CVE-2010-1028Fix available9.3 HighMarch 19, 2010
efrontlearning efrontDirectory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x...CVE-2010-1003Public exploit6.8 MediumMarch 19, 2010
orbitals orbital viewerStack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to...CVE-2010-0688Public exploitEPSS 37.8%9.3 HighMarch 19, 2010
viewvcCross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in...CVE-2010-07364.3 MediumMarch 19, 2010
postgresqlInteger overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5...CVE-2010-0733Public exploit3.5 LowMarch 19, 2010
gnome gtk, screensaver +1 moregdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs...CVE-2010-0732Fix available6.2 MediumMarch 19, 2010
sugarcrmCross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x...CVE-2010-04654.3 MediumMarch 19, 2010
linux kernelThe sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows...CVE-2010-0008Fix available7.8 HighMarch 19, 2010
linux kernelThe Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to...CVE-2009-42714.7 MediumMarch 19, 2010
dietmar schffer travelmateSQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for...CVE-2010-10277.5 HighMarch 19, 2010
mathon nicolas tmsw cleandbSQL injection vulnerability in the CleanDB - DBAL (tmsw_cleandb) extension 2.1.0 and earlier for...CVE-2010-10267.5 HighMarch 19, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open