Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
March

CVEs published in March 2010

515 vulnerabilities, 79 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefoxtoolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization...CVE-2010-01724.3 MediumMarch 25, 2010
mozilla firefoxMozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection...CVE-2010-01704.3 MediumMarch 25, 2010
mozilla firefoxThe nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image...CVE-2010-0168Public exploitEPSS 12.6%7.6 HighMarch 25, 2010
mozilla firefoxThe gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in...CVE-2010-0166Public exploit5.1 MediumMarch 25, 2010
mozilla firefoxThe TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in...CVE-2010-01659.3 HighMarch 25, 2010
mozilla firefoxUse-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src...CVE-2010-01649.3 HighMarch 25, 2010
aspindir lookmer muzik portalLookMer Music Portal stores sensitive information under the web root with insufficient access...CVE-2010-11165.0 MediumMarch 25, 2010
comscripts web server creator web portalDirectory traversal vulnerability in news/include/customize.php in Web Server Creator - Web...CVE-2010-11155.0 MediumMarch 25, 2010
comscripts web server creator web portalMultiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow...CVE-2010-1114Public exploit7.5 HighMarch 25, 2010
comscripts web server creator web portalCross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1...CVE-2010-1113Public exploit4.3 MediumMarch 25, 2010
tristan barczyk klonewsCross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to...CVE-2010-1112Public exploit4.3 MediumMarch 25, 2010
easysitenetwork jokes complete websiteMultiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote...CVE-2010-1111Public exploit4.3 MediumMarch 25, 2010
djayp phpmysportDirectory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list...CVE-2010-11105.0 MediumMarch 25, 2010
djayp phpmysportMultiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic_quotes_gpc is...CVE-2010-1109Public exploit6.8 MediumMarch 25, 2010
hashmarkconsulting controlpanelCross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x...CVE-2010-11083.5 LowMarch 25, 2010
fourkitchens recent commentsCross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6...CVE-2010-11073.5 LowMarch 25, 2010
advertisementmanagerPHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows...CVE-2010-1106Public exploit7.5 HighMarch 25, 2010
advertisementmanagerCross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6...CVE-2010-11054.3 MediumMarch 25, 2010
zopeModerate severity vulnerability that affects Zope2CVE-2010-1104Fix available4.3 MediumMarch 25, 2010
mesadynamics stainlessInteger overflow in Stainless allows remote attackers to bypass intended port restrictions on...CVE-2010-11035.0 MediumMarch 24, 2010
omnigroup omniwebInteger overflow in OmniWeb allows remote attackers to bypass intended port restrictions on...CVE-2010-11025.0 MediumMarch 24, 2010
icabInteger overflow in Alexander Clauss iCab allows remote attackers to bypass intended port...CVE-2010-11015.0 MediumMarch 24, 2010
arora-browser aroraInteger overflow in Arora allows remote attackers to bypass intended port restrictions on...CVE-2010-11005.0 MediumMarch 24, 2010
apple safariInteger overflow in Apple Safari allows remote attackers to bypass intended port restrictions on...CVE-2010-10995.0 MediumMarch 24, 2010
lexmark x94xStack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and...CVE-2010-0619Public exploit7.3 HighMarch 24, 2010
lexmark z2420The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and...CVE-2010-06185.0 MediumMarch 24, 2010
springsource application management suite, hyperic hq, tc server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and...CVE-2009-2907Public exploit4.3 MediumMarch 24, 2010
microsoft windows vista, windows xp +1 moreThe ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer...CVE-2010-1098EPSS 15.0%7.1 HighMarch 24, 2010
dedecmsinclude/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote...CVE-2010-10976.8 MediumMarch 24, 2010
scriptsfeed dating softwareMultiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow...CVE-2010-10967.5 HighMarch 24, 2010
jan schutze trucCross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking...CVE-2010-1095Public exploit4.3 MediumMarch 24, 2010
miethner-scripting dz erotik auktionshaus v4rgoSQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers...CVE-2010-1094Public exploit7.5 HighMarch 24, 2010
1024cms 1024 cmsSQL injection vulnerability in rss.php in 1024 CMS 2.1.1, when magic_quotes_gpc is disabled,...CVE-2010-1093Public exploit6.8 MediumMarch 24, 2010
scriptsfeed business directory softwareMultiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software...CVE-2010-1092Public exploit7.5 HighMarch 24, 2010
phpmysiteMultiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote...CVE-2010-1091Public exploit4.3 MediumMarch 24, 2010
phpmysiteSQL injection vulnerability in index.php in phpMySite allows remote attackers to execute...CVE-2010-1090Public exploit7.5 HighMarch 24, 2010
phptroubleticket php trouble ticketSQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to...CVE-2010-1089Public exploit7.5 HighMarch 24, 2010
linux kernelThe ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does...CVE-2010-0437Public exploitEPSS 12.3%7.8 HighMarch 24, 2010
openinferno oi.blogsMultiple directory traversal vulnerabilities in OI.Blogs 1.0.0, when magic_quotes_gpc is disabled...CVE-2010-10824.3 MediumMarch 23, 2010
corejoomla com communitypollsDirectory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2,...CVE-2010-1081Public exploitEPSS 14.6%5.0 MediumMarch 23, 2010
pulsecms pulse cmsCross-site scripting (XSS) vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers...CVE-2010-10804.3 MediumMarch 23, 2010
sawmillCross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to...CVE-2010-10794.3 MediumMarch 23, 2010
sphere.xlentprojects spherecmsSQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote...CVE-2010-1078Public exploit7.5 HighMarch 23, 2010
vbseoDirectory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin...CVE-2010-1077Public exploit6.8 MediumMarch 23, 2010
entrylevelcms el cmsCross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote...CVE-2010-10764.3 MediumMarch 23, 2010
entrylevelcms el cmsSQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to...CVE-2010-10757.5 HighMarch 23, 2010
2bits currencyCross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for...CVE-2010-10744.3 MediumMarch 23, 2010
joshprakash com jembedSQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla!...CVE-2010-1073Public exploit7.5 HighMarch 23, 2010
sniggabo cmsCross-site scripting (XSS) vulnerability in search.php in Sniggabo CMS 2.21 allows remote...CVE-2010-10724.3 MediumMarch 23, 2010
phpmdjSQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute...CVE-2010-1071Public exploit7.5 HighMarch 23, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open