Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
April

CVEs published in April 2010

515 vulnerabilities, 77 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle industry product suiteUnspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle...CVE-2010-08624.3 MediumApril 13, 2010
oracle e-business suiteUnspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite...CVE-2010-08615.0 MediumApril 13, 2010
oracle database serverUnspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1...CVE-2010-08607.1 HighApril 13, 2010
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2010-08596.4 MediumApril 13, 2010
oracle e-business suiteUnspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11...CVE-2010-08583.5 LowApril 13, 2010
oracle e-business suiteUnspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite...CVE-2010-08573.5 LowApril 13, 2010
oracle fusion middlewareUnspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4...CVE-2010-08565.0 MediumApril 13, 2010
oracle fusion middlewareUnspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows...CVE-2010-08554.3 MediumApril 13, 2010
oracle database serverUnspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5,...CVE-2010-08542.1 LowApril 13, 2010
oracle fusion middleware, database server +1 moreUnspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8,...CVE-2010-08537.5 HighApril 13, 2010
oracle database serverUnspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5...CVE-2010-08525.5 MediumApril 13, 2010
oracle database serverUnspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5...CVE-2010-08514.0 MediumApril 13, 2010
oracle fusion middlewareUnspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows...CVE-2010-00864.3 MediumApril 13, 2010
hdflvplayer com hdflvplayerSQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla!...CVE-2010-1372Public exploit7.5 HighApril 13, 2010
preprojects pre classified listings aspCross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows...CVE-2010-13714.3 MediumApril 13, 2010
preprojects pre classified listings aspSQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote...CVE-2010-13707.5 HighApril 13, 2010
preprojects pre classified listings aspSQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers...CVE-2010-1369Public exploit7.5 HighApril 13, 2010
gamescriptSQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to...CVE-2010-1368Public exploit7.5 HighApril 13, 2010
uiga fan clubMultiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan Club, as...CVE-2010-13674.3 MediumApril 13, 2010
uiga fan clubMultiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier...CVE-2010-1366Public exploit7.5 HighApril 13, 2010
uiga fan clubSQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows...CVE-2010-1365Public exploit7.5 HighApril 13, 2010
uiga personal portalSQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301,...CVE-2010-1364Public exploit7.5 HighApril 13, 2010
extremejoomla com j-projectsSQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote...CVE-2010-1363Public exploit7.5 HighApril 13, 2010
ben jeavons owntermCross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote...CVE-2010-13622.1 LowApril 13, 2010
glarotech phpeppershopCross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop...CVE-2010-1361Public exploit4.3 MediumApril 13, 2010
boesch-it faqengineMultiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to...CVE-2010-1360Public exploit7.5 HighApril 13, 2010
bluegate direct url, xt-commerce +1 moreSQL injection vulnerability in bluegate_seo.inc.php in the Direct URL module for xt:Commerce,...CVE-2010-13596.8 MediumApril 13, 2010
ron jerome bibliographyCross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17...CVE-2010-13582.1 LowApril 13, 2010
sbddirectorysoftware sbd directory softwareCross-site scripting (XSS) vulnerability in editors/logindialogue.php in SBD Directory Software 4...CVE-2010-13574.3 MediumApril 13, 2010
yasirpro ms-pro portal scriptiYP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0 and 1.2 stores sensitive information...CVE-2009-47665.0 MediumApril 13, 2010
cnr.somee hikaye portalCNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access...CVE-2009-47655.0 MediumApril 13, 2010
vsecurity tandberg video communication serverUnspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows...CVE-2010-135610.0 HighApril 13, 2010
vsecurity tandberg video communication serverCross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before...CVE-2010-13554.3 MediumApril 13, 2010
vsecurity tandberg video communication serverMultiple directory traversal vulnerabilities in the web administration interface on the TANDBERG...CVE-2009-4511Public exploit4.0 MediumApril 13, 2010
vsecurity tandberg video communication serverThe SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key...CVE-2009-45108.5 HighApril 13, 2010
vsecurity tandberg video communication serverThe administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses...CVE-2009-450910.0 HighApril 13, 2010
ternaria com vjdeoDirectory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla!...CVE-2010-1354Public exploitEPSS 15.9%5.0 MediumApril 12, 2010
wowjoomla com loginboxDirectory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows...CVE-2010-1353Public exploitEPSS 18.7%5.0 MediumApril 12, 2010
jooforge com jukeboxDirectory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for...CVE-2010-1352Public exploitEPSS 13.6%5.0 MediumApril 12, 2010
nodesforumMultiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when...CVE-2010-1351Public exploit6.8 MediumApril 12, 2010
joomlaprojects com jp jobsSQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla!...CVE-2010-1350Public exploit7.5 HighApril 12, 2010
opera browserInteger overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code...CVE-2010-1349Public exploitEPSS 19.8%10.0 HighApril 12, 2010
memcachedb memcachedmemcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service ...CVE-2010-1152Public exploitFix availableEPSS 10.4%5.0 MediumApril 12, 2010
freedesktop udisksprobers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to...CVE-2010-11492.1 LowApril 12, 2010
linux kernelThe Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read...CVE-2010-1146Public exploit6.9 MediumApril 12, 2010
vmware ace, esx, esxi +4 more +6 moreVMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2...CVE-2010-11428.5 HighApril 12, 2010
vmware ace, esx, esxi +4 more +6 moreVMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2...CVE-2010-11418.5 HighApril 12, 2010
vmware player, workstation +1 moreThe USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before...CVE-2010-11406.9 MediumApril 12, 2010
vmware fusion, player, server +2 more +4 moreFormat string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5...CVE-2010-11397.2 HighApril 12, 2010
vmware ace, fusion, player +2 more +4 moreThe virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware...CVE-2010-11385.0 MediumApril 12, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open