Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
May

CVEs published in May 2010

402 vulnerabilities, 54 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft visioBuffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted...CVE-2010-1681Public exploitEPSS 67.3%7.6 HighMay 5, 2010
tirzen framework, taskfreak taskfreak\! +1 moreSQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql...CVE-2010-1583Public exploit7.5 HighMay 5, 2010
roxio cineplayerHeap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in...CVE-2009-4841Public exploit9.3 HighMay 5, 2010
roxio cineplayerHeap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer...CVE-2009-4840Public exploit9.3 HighMay 5, 2010
secureideas basic analysis and security engineMultiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE),...CVE-2009-48394.3 MediumMay 5, 2010
secureideas basic analysis and security engineSQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE)...CVE-2009-48387.5 HighMay 5, 2010
secureideas basic analysis and security engineMultiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE)...CVE-2009-48374.3 MediumMay 5, 2010
moviephp movie php scriptEval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote...CVE-2009-4836Public exploit7.5 HighMay 5, 2010
mega-nerd libsndfileThe (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6)...CVE-2009-4835Fix available4.3 MediumMay 5, 2010
google chromeGoogle Chrome on the HTC Hero allows remote attackers to cause a denial of service (application...CVE-2010-17314.3 MediumMay 5, 2010
dolphin browserDolphin Browser 2.5.0 on the HTC Hero allows remote attackers to cause a denial of service ...CVE-2010-17305.0 MediumMay 5, 2010
apple safari, webkit +1 moreWebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to...CVE-2010-17294.3 MediumMay 5, 2010
opera browserOpera before 10.53 on Windows and Mac OS X does not properly handle a series of document...CVE-2010-17289.3 HighMay 5, 2010
aspsiteware jobpostSQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute...CVE-2010-1727Public exploit7.5 HighMay 5, 2010
alibabaclone ec21 cloneSQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to...CVE-2010-1726Public exploit7.5 HighMay 5, 2010
alibabaclone alibaba clone platinumSQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers...CVE-2010-1725Public exploit7.5 HighMay 5, 2010
zikula application frameworkMultiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and...CVE-2010-1724Public exploit4.3 MediumMay 5, 2010
mytty webapplication finger printerWeb Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames under /tmp for temporary...CVE-2010-14384.4 MediumMay 5, 2010
tonec internet download managerStack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote...CVE-2010-09959.3 HighMay 5, 2010
abcbackup abc backup, internet-soft urgent backup +1 moreStack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup...CVE-2010-1686Public exploit9.3 HighMay 4, 2010
adobe photoshop cs4Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user...CVE-2010-12799.3 HighMay 4, 2010
openttdOpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor...CVE-2010-0406Fix available4.0 MediumMay 4, 2010
openttdOpenTTD before 1.0.1 does not properly validate index values of certain items, which allows...CVE-2010-0402Fix available6.5 MediumMay 4, 2010
openttdOpenTTD before 1.0.1 accepts a company password for authentication in response to a request for...CVE-2010-0401Fix available6.5 MediumMay 4, 2010
joomlacomponent.inetlanka com drawrootDirectory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot)...CVE-2010-1723Public exploit6.8 MediumMay 4, 2010
dev.pucit.edu.pk com marketDirectory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla!...CVE-2010-1722Public exploit6.8 MediumMay 4, 2010
thethinkery com ipropertySQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty)...CVE-2010-1721Public exploit7.5 HighMay 4, 2010
qproje com qpersonelSQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for...CVE-2010-1720Public exploit7.5 HighMay 4, 2010
moto-treks com mtfireeagleDirectory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla...CVE-2010-1719Public exploit6.8 MediumMay 4, 2010
lispeltuut com archeryscoresDirectory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores)...CVE-2010-1718Public exploit6.8 MediumMay 4, 2010
if surfalert project surfalertDirectory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla...CVE-2010-1717Public exploitEPSS 22.3%7.5 HighMay 4, 2010
joomlanetprojects com agendaSQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla!...CVE-2010-1716Public exploit7.5 HighMay 4, 2010
pucit.edu com onlineexamDirectory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam)...CVE-2010-1715Public exploit6.8 MediumMay 4, 2010
dev.pucit.edu.pk com arcadegamesDirectory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla!...CVE-2010-1714Public exploitEPSS 18.7%5.0 MediumMay 4, 2010
postnukeSQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute...CVE-2010-1713Public exploit7.5 HighMay 4, 2010
webmobo wbnewsMultiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3...CVE-2010-1712Public exploit4.3 MediumMay 4, 2010
ramoncastro siesttaCross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when...CVE-2010-1711Public exploit4.3 MediumMay 4, 2010
ramoncastro siesttaDirectory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled,...CVE-2010-1710Public exploit6.8 MediumMay 4, 2010
g5-scripts auto-img-galleryMultiple cross-site scripting (XSS) vulnerabilities in upload.cgi in G5-Scripts Auto-Img-Gallery...CVE-2010-17094.3 MediumMay 4, 2010
freerealty.rwcinc free realtyMultiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to...CVE-2010-1708Public exploit7.5 HighMay 4, 2010
piwigoMultiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier...CVE-2010-17074.3 MediumMay 4, 2010
2daybiz auction scriptMultiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote...CVE-2010-1706Public exploit7.5 HighMay 4, 2010
rocky.nu modelbookSQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute...CVE-2010-1705Public exploit7.5 HighMay 4, 2010
2daybiz polls scriptMultiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote...CVE-2010-1704Public exploit7.5 HighMay 4, 2010
2daybiz polls scriptMultiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka...CVE-2010-1703Public exploit4.3 MediumMay 4, 2010
whmcsSQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote...CVE-2010-1702Public exploit7.5 HighMay 4, 2010
rocky.nu php video battle scriptSQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to...CVE-2010-1701Public exploit7.5 HighMay 4, 2010
mochasoft mocha w32 lpdStack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a...CVE-2010-1687Public exploit5.0 MediumMay 4, 2010
cursorarts zipwranglerStack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers...CVE-2010-1685Public exploit9.3 HighMay 4, 2010
cisco router and security device managerCross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows...CVE-2010-05944.3 MediumMay 4, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open