CVEs published in March 2010
515 vulnerabilities, 79 critical, 1 exploited.
- tiki tikiwiki cms\/groupwareThe user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user...7.5 High
- tiki tikiwiki cms\/groupwareSQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x...7.5 High
- tiki tikiwiki cms\/groupwareMultiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote...7.5 High
- apple safariJavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to...4.3 Medium
- phpsession.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ;...5.0 Medium
- phpThe safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames...7.5 High
- phpThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 and 7 does not initialize certain data structures during execution...5.0 Medium
- apple webkitThe JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a...5.8 Medium
- mozilla firefox, seamonkey +1 moreThe JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and...5.8 Medium
- phppower swinger club portalPHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows...7.5 High
- phppower swinger club portalSQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers...7.5 High
- phppower top paidmailerPHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to...6.8 Medium
- phplivesupport php live\!Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to...7.5 High
- andrew charlton my category orderSQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and...7.5 High
- tecnick aiocpPHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One...7.5 High
- dreamlevels dreampollCross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote...4.3 Medium
- dreamlevels dreampollMultiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote...7.5 High
- oicgroup exponent cmsCross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213...4.3 Medium
- afterlogic webmail proMultiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail...4.3 Medium
- doceboMultiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute...7.5 High
- skypeUnspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on...10.0 High
- typo3 ws ecardDirectory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier...7.5 High
- skadate online dating softwarePHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to...6.8 Medium
- ibm aixbos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field...7.8 High
- chip salzenberg deliverChip Salzenberg Deliver does not properly associate a lockfile with the user who created the file...2.1 Low
- pulsecms pulse cmsDirectory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote...5.5 Medium
- pulsecms pulse cmsMultiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to...6.0 Medium
- opensslThe ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote...5.0 Medium
- gnu gnutlsThe gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big...7.5 High
- chip salzenberg deliverChip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive...6.9 Medium
- alkacon oamp commentsMultiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow...4.3 Medium
- mozilla firefoxUnspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause...10.0 High
- mit kerberos 5The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS...5.0 Medium
- mozilla firefoxMozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are...10.0 High
- apple safariUnspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute...10.0 High
- apple iphone os, mac os x, safari +1 more +3 moreUse-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6...10.0 High
- microsoft internet explorerUnspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers...10.0 High
- microsoft internet explorerHeap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers...7.6 High
- cisco iosCisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco...7.8 High
- cisco iosCisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco...7.8 High
- cisco iosUnspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled,...7.8 High
- cisco iosMemory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1...7.8 High
- cisco iosCisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a...7.8 High
- cisco iosUnspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote...10.0 High
- cisco iosUnspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote...10.0 High
- cisco iosThe SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of...7.8 High
- cisco iosThe IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+...7.8 High
- cisco iosCisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used,...7.1 High
- cisco ios, ios xe, ios xr +2 moreUnspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2...7.8 High
- Show moreLoading…