Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
April

CVEs published in April 2010

515 vulnerabilities, 77 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

vpasp vp-asp shopping cartCross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP...CVE-2010-15904.3 MediumApril 28, 2010
vpasp vp-asp shopping cartDirectory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP...CVE-2010-15895.0 MediumApril 28, 2010
vpasp vp-asp shopping cartSQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt...CVE-2010-15887.5 HighApril 28, 2010
apache activemqApache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandlerCVE-2010-1587Public exploitFix availableEPSS 78.0%5.0 MediumApril 28, 2010
hp system management homepageOpen redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows...CVE-2010-1586Public exploitEPSS 10.3%4.3 MediumApril 28, 2010
mozilla firefox, seamonkey, thunderbird +2 moreThe nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection...CVE-2010-15859.3 HighApril 28, 2010
redhat jboss enterprise application platformRed Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...CVE-2010-1429EPSS 53.7%5.0 MediumApril 28, 2010
red hat jboss, redhat jboss enterprise application platform +1 moreThe Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform ...CVE-2010-1428In KEVEPSS 52.7%7.5 HighApril 28, 2010
hp systems insight managerUnspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated...CVE-2010-10386.5 MediumApril 28, 2010
hp systems insight managerCross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows...CVE-2010-10376.8 MediumApril 28, 2010
hp systems insight managerCross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote...CVE-2010-10364.3 MediumApril 28, 2010
red hat jboss, redhat jboss enterprise application platform +1 moreThe JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka...CVE-2010-0738In KEVPublic exploitEPSS 73.8%5.3 MediumApril 28, 2010
ibm db2Buffer overflow in the REPEAT function in IBM DB2 9.1 before FP9 allows remote authenticated...CVE-2010-15604.0 MediumApril 27, 2010
martin hess com sermonspeakerSQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for...CVE-2010-1559Public exploit7.5 HighApril 27, 2010
ibm websphere mqUnspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows...CVE-2010-07724.0 MediumApril 27, 2010
apple mac os xThe hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to...CVE-2010-0105Public exploit4.9 MediumApril 27, 2010
openxUnspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass...CVE-2009-48307.5 HighApril 27, 2010
james glasgow autologoutCross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7...CVE-2009-48292.1 LowApril 27, 2010
phpwebscripts ad manager proCross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro ...CVE-2009-4828Public exploit6.8 MediumApril 27, 2010
scriptez mail manager proCross-site request forgery (CSRF) vulnerability in admin.php in Mail Manager Pro allows remote...CVE-2009-4827Public exploit6.8 MediumApril 27, 2010
scriptsez mini hosting panelCross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting...CVE-2009-4826Public exploit6.8 MediumApril 27, 2010
8pixel simple blog8pixel.net Blog 4 stores sensitive information under the web root with insufficient access...CVE-2009-4825Public exploit5.0 MediumApril 27, 2010
cpanelCross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through...CVE-2009-4823Public exploit4.3 MediumApril 27, 2010
kasseler-cms kasseler cmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow...CVE-2009-4822Public exploit4.3 MediumApril 27, 2010
dlink dir-615The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply...CVE-2009-48215.0 MediumApril 27, 2010
aspindir angelo-emlakAngelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control...CVE-2009-4820Public exploit5.0 MediumApril 27, 2010
stoverud phphotoalbumMultiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote...CVE-2009-4819Public exploit6.8 MediumApril 27, 2010
phpsimplicity simplicity of uploadUnrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2...CVE-2009-4818Public exploit6.8 MediumApril 27, 2010
element-it ultimate uploaderUnrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote...CVE-2009-4817Public exploit6.8 MediumApril 27, 2010
andy stedemos the uploaderDirectory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows...CVE-2009-4816Public exploit5.0 MediumApril 27, 2010
solarwinds serv-u file serverDirectory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to...CVE-2009-48154.0 MediumApril 27, 2010
wolfram webmathematicaCross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote...CVE-2009-4814Public exploit4.3 MediumApril 27, 2010
mybbCross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows...CVE-2009-4813Public exploit4.3 MediumApril 27, 2010
wolfram webmathematicaWolfram Research webMathematica allows remote attackers to obtain sensitive information via a...CVE-2009-48125.0 MediumApril 27, 2010
vmware ace, player, server +1 more +3 moreVMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in...CVE-2009-48115.0 MediumApril 27, 2010
acme micro httpd, rca digital cable modem +1 moremicro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service ...CVE-2010-1544Public exploit5.0 MediumApril 26, 2010
etrackerCross-site scripting (XSS) vulnerability in the eTracker module before 6.x-1.2 for Drupal allows...CVE-2010-15434.3 MediumApril 26, 2010
dragonfrugal dfd cartMultiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1...CVE-2010-15426.8 MediumApril 26, 2010
dragonfrugal dfd cartMultiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow...CVE-2010-15414.3 MediumApril 26, 2010
myblog com myblogDirectory traversal vulnerability in index.php in the MyBlog (com_myblog) component 3.0.329 for...CVE-2010-1540Public exploit5.0 MediumApril 26, 2010
john vandyk workflowCross-site scripting (XSS) vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1...CVE-2010-15392.1 LowApril 26, 2010
bluestrikeweb phpraincheckSQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows...CVE-2010-1538Public exploit7.5 HighApril 26, 2010
francois bissonnette phpcdbMultiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to...CVE-2010-1537Public exploit7.5 HighApril 26, 2010
mearra addthisCross-site scripting (XSS) vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x...CVE-2010-15362.1 LowApril 26, 2010
peter hocherl com travelbookDirectory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla!...CVE-2010-1535Public exploitEPSS 15.3%7.5 HighApril 26, 2010
joomla.batjo com shoutboxDirectory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows...CVE-2010-1534Public exploitEPSS 13.6%5.0 MediumApril 26, 2010
peter hocherl com tweetlaDirectory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows...CVE-2010-1533Public exploitEPSS 15.1%7.5 HighApril 26, 2010
givesight com powermailDirectory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3...CVE-2010-1532Public exploitEPSS 15.9%5.0 MediumApril 26, 2010
redcomponent com redshopDirectory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows...CVE-2010-1531Public exploitEPSS 16.9%7.5 HighApril 26, 2010
reyero i18nMultiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before...CVE-2010-15302.1 LowApril 26, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open