Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
April

CVEs published in April 2010

515 vulnerabilities, 77 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

linux kernelThe virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux...CVE-2010-07417.8 HighApril 12, 2010
vmware ace, player, server +1 more +3 moreFormat string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc)...CVE-2009-3732Public exploitEPSS 16.2%10.0 HighApril 12, 2010
vmware movie decoder, player, server +1 more +3 morevmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows,...CVE-2009-15659.3 HighApril 12, 2010
vmware movie decoder, player, server +1 more +3 moreHeap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5...CVE-2009-15649.3 HighApril 12, 2010
ibm websphere portalUnspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x...CVE-2010-13487.5 HighApril 12, 2010
ibm director agentDirector Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect...CVE-2010-13477.2 HighApril 12, 2010
linux kernelThe cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local...CVE-2010-11484.7 MediumApril 12, 2010
ribafs mini cms ribafsSQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is...CVE-2010-1346Public exploit6.8 MediumApril 9, 2010
cookex com ckformsDirectory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for...CVE-2010-1345Public exploitEPSS 16.9%5.0 MediumApril 9, 2010
cookex com ckformsSQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla...CVE-2010-1344Public exploit7.5 HighApril 9, 2010
bjsintay sitexSQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute...CVE-2010-1343Public exploit7.5 HighApril 9, 2010
directnews direct newsMultiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals...CVE-2010-1342Public exploit6.8 MediumApril 9, 2010
systemsoftware community black forumSQL injection vulnerability in index.php in Systemsoftware Community Black Forum allows remote...CVE-2010-1341Public exploit7.5 HighApril 9, 2010
joomla-research com jresearchDirectory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component...CVE-2010-1340Public exploitEPSS 13.6%5.0 MediumApril 9, 2010
robertotto teamsite hack pluginCross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and...CVE-2010-13394.3 MediumApril 9, 2010
robertotto teamsite hack pluginSQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for...CVE-2010-1338Public exploit7.5 HighApril 9, 2010
lussumo vanillaMultiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10,...CVE-2010-1337Public exploit7.5 HighApril 9, 2010
invohostMultiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute...CVE-2010-1336Public exploit7.5 HighApril 9, 2010
miftahovn insky cmsMultiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register_globals...CVE-2010-1335Public exploit6.8 MediumApril 9, 2010
pulsecms pulse cmsUnrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users...CVE-2010-13346.0 MediumApril 9, 2010
almas compiereMultiple cross-site scripting (XSS) vulnerabilities in Almas Inc. Compiere J300_A02 and earlier...CVE-2010-13334.3 MediumApril 9, 2010
prettybook prettyformmailCross-site scripting (XSS) vulnerability in PrettyBook PrettyFormMail allows remote attackers to...CVE-2010-13324.3 MediumApril 9, 2010
heartlogic hl-sitemanagerSQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute...CVE-2010-13317.5 HighApril 9, 2010
pulsecms pulse cmsUnrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro...CVE-2010-09936.0 MediumApril 9, 2010
pulsecms pulse cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3,...CVE-2010-09926.8 MediumApril 9, 2010
joomlamo com weberpcustomerDirectory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer...CVE-2010-1315Public exploit5.0 MediumApril 8, 2010
joomlanook com hsconfigDirectory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for...CVE-2010-1314Public exploitEPSS 15.9%5.0 MediumApril 8, 2010
seber com sebercartDirectory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0...CVE-2010-1313Public exploit4.3 MediumApril 8, 2010
ijoomla com news portalDirectory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x...CVE-2010-1312Public exploitEPSS 13.6%5.0 MediumApril 8, 2010
clamavThe qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers...CVE-2010-1311Fix available5.0 MediumApril 8, 2010
opera browserOpera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs,...CVE-2010-13105.0 MediumApril 8, 2010
ermenegildo fiorito irmin cmsDirectory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote...CVE-2010-1309Public exploit5.0 MediumApril 8, 2010
iscsitarget, zaal tgt +1 moreMultiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or...CVE-2010-0743Fix available5.0 MediumApril 8, 2010
clamavClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows...CVE-2010-0098Fix available10.0 HighApril 8, 2010
la-souris-verte com svmapDirectory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows...CVE-2010-1308Public exploitEPSS 14.0%5.0 MediumApril 8, 2010
software.realtyna com joomlaupdaterDirectory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla!...CVE-2010-1307Public exploitEPSS 10.2%5.0 MediumApril 8, 2010
roberto aloi com joomlapicasa2Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for...CVE-2010-1306Public exploitEPSS 15.7%7.5 HighApril 8, 2010
joomlamo com jinventoryDirectory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component...CVE-2010-1305Public exploitEPSS 20.7%5.0 MediumApril 8, 2010
joomlamo com userstatusDirectory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component...CVE-2010-1304Public exploitEPSS 14.0%5.0 MediumApril 8, 2010
jim berry taxonomy filterMultiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x...CVE-2010-13032.1 LowApril 8, 2010
decryptweb com dwgraphsDirectory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs)...CVE-2010-1302Public exploit5.0 MediumApril 7, 2010
merethis centreonSQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute...CVE-2010-1301Public exploit7.5 HighApril 7, 2010
yamamahSQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote...CVE-2010-1300Public exploit7.5 HighApril 7, 2010
dynpgMultiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when...CVE-2010-1299Public exploitEPSS 10.7%5.1 MediumApril 7, 2010
ermenegildo fiorito irmin cmsDirectory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi...CVE-2008-7254Public exploit6.8 MediumApril 7, 2010
ca xosoft content distribution, xosoft high availability, xosoft replication +2 moreMultiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute...CVE-2010-1223EPSS 16.8%10.0 HighApril 7, 2010
ca xosoft content distribution, xosoft high availability, xosoft replication +2 moreCA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain...CVE-2010-12225.0 MediumApril 7, 2010
ca xosoft content distribution, xosoft high availability, xosoft replication +2 moreCA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers...CVE-2010-12215.0 MediumApril 7, 2010
alex rabe nextgen galleryCross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin...CVE-2010-1186Public exploit4.3 MediumApril 7, 2010
mit kerberos 5, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...CVE-2010-0629Fix available6.5 MediumApril 7, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open