CVEs published in May 2010
402 vulnerabilities, 54 critical, 0 exploited.
- phpThe chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...5.0 Medium
- phpThe sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...6.4 Medium
- phpThe html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Medium
- deluxebbSQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is...6.8 Medium
- scripts.oldguy talkbackaddons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via...7.5 High
- gelembjuk com smestorageDirectory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for...5.0 Medium
- realitymedias repairshop2SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is...6.8 Medium
- realitymedias repairshop2Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when...2.6 Low
- phpscripte24 pay per watch \& bid auktions systemSQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote...7.5 High
- phpscripte24 pay per watch \& bid auktions systemCross-site scripting (XSS) vulnerability in auktion.php in Pay Per Watch & Bid Auktions System...4.3 Medium
- transmissionbt transmissionMultiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c...6.8 Medium
- microsoft exchange server, windows 2000, windows server 2003 +2 more +4 moreThe DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and...6.4 Medium
- microsoft exchange server, windows 2000, windows server 2003 +2 more +4 moreThe DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and...6.4 Medium
- debian linux, linux kernel +1 moreThe TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on...2.1 Low
- debian linux, linux kernel, opensuse +3 more +5 moreRace condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux...7.0 High
- linux kernelThe sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and...7.1 High
- jumpboxMultiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki...4.3 Medium
- festic semanticscuttleMultiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote...4.3 Medium
- xoopsThe activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation...5.0 Medium
- awingsoft awakening winds3d viewer pluginThe Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute...9.3 High
- toutvirtual virtualiqMultiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build...6.8 Medium
- toutvirtual virtualiqMultiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882...4.3 Medium
- deliantraDeliantra Server before 2.82 allows remote authenticated users to cause a denial of service ...4.0 Medium
- deliantraMultiple buffer overflows in Deliantra Server before 2.82 allow remote attackers to execute...6.8 Medium
- microsoft internet explorerMicrosoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during...4.3 Medium
- google chromeGoogle Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP...4.3 Medium
- hp loadrunner, performance center +1 moreUnspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center...10.0 High
- piwik, matomo +1 moreCross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows...4.3 Medium
- tug tetex, tex live +1 moreMultiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX...6.8 Medium
- fetchmailfetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid...4.3 Medium
- vmware view managerCross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM)...4.3 Medium
- jan-ake larsson dvipng, tug tetex +1 moreMultiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers...4.3 Medium
- tug tetex, tex live +1 moreInteger overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to...6.8 Medium
- toutvirtual virtualiqThe configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH...5.0 Medium
- toutvirtual virtualiqToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080...5.0 Medium
- toutvirtual virtualiqToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication...7.5 High
- toutvirtual virtualiqMultiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691...4.3 Medium
- toolsjx com gridMultiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for...4.3 Medium
- alibabaclone b2b gold scriptSQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute...7.5 High
- satyadeep scratcherSQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute...7.5 High
- satyadeep scratcherCross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to...4.3 Medium
- billwerx rcSQL injection vulnerability in request_account.php in Billwerx RC 5.2.2 PL2 allows remote...7.5 High
- freeguppy guppySQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute...7.5 High
- joomla com newsfeedsSQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote...7.5 High
- carlos eduardo sotelo pinto 0.1.0PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0, when...6.8 Medium
- aspindir krm haberKrM Haber 1.0 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- microsoft windows 2000, windows 2003 server, windows server 2003 +1 more +3 moreThe SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server...4.9 Medium
- microsoft windows 2000, windows 2003 server, windows server 2003 +1 more +3 moreThe SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server...4.9 Medium
- ocsinventory-ng ocs inventory ngMultiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers...6.8 Medium
- zikula application frameworkCross-site request forgery (CSRF) vulnerability in the users module in Zikula Application...6.8 Medium
- Show moreLoading…