CVEs published in April 2010
515 vulnerabilities, 77 critical, 3 exploited.
- mojoblogMultiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla!...7.5 High
- pligg cmsMultiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to...4.3 Medium
- pligg cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote...6.8 Medium
- pligg cmsMultiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers...4.3 Medium
- bhavesh chauhan com quicknewsSQL injection vulnerability in the Quick News (com_quicknews) component for Joomla! allows remote...7.5 High
- joaktree com joaktreeSQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows...7.5 High
- mntechsolutions theeta cmsMultiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to...7.5 High
- mntechsolutions theeta cmsMultiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote...4.3 Medium
- tukeva password reminderTUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows...7.2 High
- phpmyfaqMultiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow...4.3 Medium
- robert garrigos nukehallMultiple PHP remote file inclusion vulnerabilities in NukeHall 0.3 and earlier allow remote...7.5 High
- rim blackberry enterprise server, blackberry professional software +1 moreMultiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in...9.3 High
- hitachi job management partner 1\/automatic job management system 2-view, job management partner 1\/integrated management-view, job management partner 1\/integrated manager-console view +11 more +13 moreUnspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 -...4.3 Medium
- hitachi processing kit for xml, cosminexus\/opentp1 web web front-endset, cosminexus application server +22 more +24 moreBuffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit...9.3 High
- ipswitch ws ftpFormat string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote...4.3 Medium
- sun opensolaris, solaris +1 moreUnspecified vulnerability in Sun Solaris 10 and OpenSolaris snv_49 through snv_117, when 64bit...4.0 Medium
- typo3TYPO3 PHP remote file inclusion vulnerability6.8 Medium
- sun javaUnspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for...10.0 High
- sun jdk, jre +1 moreUnspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for...10.0 High
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the...4.3 Medium
- tweakfs zip utilityStack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight...6.8 Medium
- apache http serverRace condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers...6.8 Medium
- e107Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the...3.5 Low
- e107Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to...6.0 Medium
- amsnlogin_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout,...4.6 Medium
- linux kernelThe proc_oom_score function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses...2.1 Low
- ibm lotus notesIBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe,...2.1 Low
- realnetworks helix mobile server, helix server, helix server mobile +2 moreInteger overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in...10.0 High
- realnetworks helix mobile server, helix server, helix server mobile +2 moreStack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in...10.0 High
- realnetworks helix server, helix dna server, helix server mobile +2 moreHeap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server...7.5 High
- atlassian jiraAtlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary...9.0 High
- atlassian jiraMultiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow...4.3 Medium
- linux kernelThe release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits...7.2 High
- perlInteger overflow in the regular expression engine in Perl 5.8.x allows context-dependent...5.0 Medium
- mediawikiMediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly...6.0 Medium
- alvaro alvaros messengeraMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the...5.8 Medium
- ubercartCross-site request forgery (CSRF) vulnerability in the order-management functionality in the...6.8 Medium
- ubercartUnspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart...4.3 Medium
- ubercartThe PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and...5.0 Medium
- jasper httpdxThe FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of...7.5 High
- jasper httpdxMultiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b,...9.3 High
- blizzard warcraft 3 the frozen throneUnspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b...9.3 High
- plohni shoutboxMultiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow...4.3 Medium
- rockettheme com rokmoduleSQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows...7.5 High
- rockettheme com rokmoduleSQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows...7.5 High
- ternaria com jfeedbackDirectory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback)...6.8 Medium
- martin hess com sermonspeakerSQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for...7.5 High
- alphaplug com alphauserpointsDirectory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5...6.8 Medium
- ternaria com preventiveDirectory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0...6.8 Medium
- supachai teasakul com sweetykeeperDirectory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for...6.8 Medium
- Show moreLoading…