CVEs published in April 2010
515 vulnerabilities, 77 critical, 3 exploited.
- google chrome Google Chrome before 4.1.249.1064 does not properly handle fonts, which allows remote attackers... 7.5 High
- google chrome Google Chrome before 4.1.249.1064 does not properly handle HTML5 media, which allows remote... 5.0 Medium
- google chrome The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064... 10.0 High
- jcink php-quick-arcade Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21... 4.3 Medium
- jcink php-quick-arcade Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers... 7.5 High
- clscript classifieds script SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote... 7.5 High
- webkul com ultimateportfolio Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0... 5.0 Medium
- code-garage com noticeboard Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3... 5.0 Medium
- recly com smartsite Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla!... 5.0 Medium
- airiny com abc SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote... 7.5 High
- powereasy siteweaver Cross-site scripting (XSS) vulnerability in User/User_ChkLogin.asp in PowerEasy 2006 and... 4.3 Medium
- instantrankingseo infocus real estate Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate... 7.5 High
- htmlcoderhelper com graphics Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6... 7.5 High
- helpcenterlive hcl Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2... 5.0 Medium
- ibm websphere application server IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when... 1.9 Low
- ibm websphere application server IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x... 1.9 Low
- moodle Moodle vulnerable to Cross-site Scripting 4.3 Medium
- ja-sig phpcas client library, moodle +1 more phpCAS client library and Moodle Cross-site Scripting vulnerability 4.3 Medium
- moodle Moodle doesn't properly check role 4.0 Medium
- moodle Moodle is vulnerable to unauthorized new accounts creation 4.0 Medium
- moodle Moodle vulnerable to SQL injection 7.5 High
- moodle Moodle vulnerable to Cross-site Scripting 4.3 Medium
- moodle Moodle Session Fixation vulnerability 6.8 Medium
- x x.org The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1... 7.1 High
- microsoft sharepoint server, sharepoint services +1 more Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server... 4.3 Medium
- ibm websphere datapower xml accelerator xa35, websphere datapower b2b appliance xb60, websphere datapower datapower integration appliance xi50 +2 more +4 more The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration... 5.0 Medium
- alegrocart Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to... 6.8 Medium
- opencart Cross-site request forgery (CSRF) vulnerability in index.php in OpenCart 1.4 allows remote... 6.8 Medium
- oracle mysql connector\/net MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during... 5.8 Medium
- deslock deslock\+ The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges... 7.2 High
- cerulean studios trillian Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication,... 5.8 Medium
- sap netweaver Cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13... 4.3 Medium
- ibm lotus notes Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions,... 10.0 High
- paysyspro com wmi Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or... 6.8 Medium
- ncrypted nct jobs portal script Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote... 4.3 Medium
- ncrypted nct jobs portal script Multiple SQL injection vulnerabilities in isearch.php in NCT Jobs Portal Script allow remote... 7.5 High
- ncrypted nct jobs portal script Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote... 6.8 Medium
- zimbllc com zimbcore Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1... 7.5 High
- zimbllc com zimbcomment Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for... 7.5 High
- joomlamart com jacomment Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows... 5.0 Medium
- thefactory com mediamall SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla!... 7.5 High
- nkinfoweb SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers... 7.5 High
- silisoftware phpthumb\(\) phpThumb.php in phpThumb() 1.7.9 and possibly other versions, when ImageMagick is installed,... 6.8 Medium
- zipgenius Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote... 9.3 High
- sitracker support incident tracker Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows... 6.8 Medium
- ocsinventory-ng ocs inventory ng Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow... 7.5 High
- ocsinventory-ng ocs inventory ng Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1... 4.3 Medium
- silverstripe SilverStripe vulnerable to Cross-site Scripting 4.3 Medium
- sisoftware sandra sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1... 6.9 Medium
- rising-global rising antivirus Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input... 7.2 High
- Show olderLoading…