CVEs published in April 2010
515 vulnerabilities, 77 critical, 3 exploited.
- pulsecms pulse cmsDirectory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read...4.0 Medium
- linux kernelfs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks,"...5.4 Medium
- debian linux, linux kernel +1 moreThe nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5...7.8 High
- debian linux, linux kernel +1 moreThe ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux...7.8 High
- linux kernelThe azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running...7.1 High
- linux kernelLinux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause...7.1 High
- linux kernelThe processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32...4.7 Medium
- justsystems ichitaro, ichitaro viewer +1 moreStack-based buffer overflow in JustSystems Corporation Ichitaro 13, 2004 through 2009, Viewer...9.3 High
- zabbixSQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2...7.5 High
- bbsxpMultiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2 allow remote attackers to...4.3 Medium
- bbsxpCross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to...4.3 Medium
- webtoolkit wtCross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to...4.3 Medium
- emweb wtEmweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal...9.3 High
- komputer.boo gnat-tgpPHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier...7.5 High
- smart-plugs smartplugsSQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute...7.5 High
- roshan singh open direct connect hubStack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1...6.0 Medium
- libnids project libnids, fedoraproject fedora +1 moreThe ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly...5.0 Medium
- freedesktop policykitpkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence...2.1 Low
- phpscripte24 multi suktions komplett systemSQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote...7.5 High
- phpscripte24 niedrig gebote pro auktions system iiSQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II...7.5 High
- fh54 justvisualDirectory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is...6.8 Medium
- kjetiltroan webmaid cmsMultiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote...5.0 Medium
- kjetiltroan webmaid cmsMultiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow...7.5 High
- ekith com dcs flashgamesSQL injection vulnerability in Adam Corley dcsFlashGames (com_dcs_flashgames) allows remote...7.5 High
- maharaSQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2,...4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3...9.3 High
- apache activemqCross-site request forgery in Apache ActiveMQ6.8 Medium
- apache activemqCross-site scripting in Apache ActiveMQ3.5 Low
- novell netware, netware ftp server +1 moreStack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1...6.5 Medium
- apache couchdbApache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by...4.3 Medium
- varnish.projects.linpro varnish** DISPUTED ** The Command Line Interface (aka Server CLI or administration interface) in the...7.5 High
- apple airport utilityAirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC...6.8 Medium
- ibm webiThe IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies...7.5 High
- ibm webiMultiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content...4.3 Medium
- adobe acrobat readerHeap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x...9.3 High
- adobe acrobat readerAdobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not...9.3 High
- foxitsoftware foxit readerFoxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs...9.3 High
- moinmo moinmoinMoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying...5.0 Medium
- piotr roszatycki libnss-dbThe Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the...1.9 Low
- gnu emacslib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete...4.4 Medium
- adobe acrobat readerAdobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF...9.3 High
- mielke brlttyUntrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain...6.9 Medium
- novell netware, netware ftp server +1 moreNWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial...7.5 High
- novell netware, netware ftp server +1 moreNWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement...4.0 Medium
- novell netware, netware ftp server +1 moreNWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a...5.0 Medium
- novell netware, netware ftp server +1 moreNWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an...7.5 High
- novell netware, netware ftp server +1 moreNWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions...4.3 Medium
- novell netware, netware ftp server +1 moreNWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict...7.5 High
- Show moreLoading…