CVEs published in May 2010
402 vulnerabilities, 54 critical, 0 exploited.
- efrontlearning efrontSQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers...7.5 High
- phpStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Medium
- s9y serendipity, xinha wysiwyg editor +1 moreThe dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in...7.5 High
- phpThe preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...5.0 Medium
- phpThe Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...5.0 Medium
- artifex gpl ghostscriptStack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context...9.3 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreThe default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll...9.3 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreThe SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and...9.3 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreThe site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live...9.3 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreThe Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber...5.1 Medium
- consona dynamic agent, live assistance, subscriber assistance +2 moreBuffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in...7.6 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreThe SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent,...9.3 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreThe SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent,...4.3 Medium
- consona dynamic agent, repair manager, subscriber activation +1 more +3 moretgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation,...7.2 High
- consona dynamic agent, live assistance, subscriber assistance +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent,...4.3 Medium
- pmwikiCross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote...3.5 Low
- wireshark, ethereal group ethereal +1 moreThe DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user...4.3 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat...2.6 Low
- blueflyingfish.no-ip com orgchartDirectory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla!...7.5 High
- jtmreseller com jtmSQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows...7.5 High
- ajsquare aj shopping cartSQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to...7.5 High
- com-property com propertiesDirectory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22...7.5 High
- com-property com propertiesSQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for...7.5 High
- jvehicles com jvehiclesSQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for...7.5 High
- tufat flashcardCross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows...4.3 Medium
- videolan vlc media playerInteger underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp...7.5 High
- logoshows bbsMultiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow...7.5 High
- logoshows bbsSQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote...7.5 High
- phpcityportalMultiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to...7.5 High
- hitronsoft nasim guest bookCross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote...4.3 Medium
- hitronsoft answer meCross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to...4.3 Medium
- tony million tuniacBuffer overflow in Tuniac 090517c allows remote attackers to cause a denial of service ...4.3 Medium
- matt wright simple searchCross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple...4.3 Medium
- i-escorts agency script, directory script +1 moreMultiple SQL injection vulnerabilities in escorts_search.php in I-Escorts Directory Script and...6.8 Medium
- i-escorts agency script, directory script +1 moreMultiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory...4.3 Medium
- ultraplayer media playerStack-based buffer overflow in UltraPlayer Media Player 2.112 allows remote attackers to execute...9.3 High
- abushhab alwaselMultiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary...7.5 High
- supportpro supportdeskCross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows...4.3 Medium
- demarque typing palSQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to...7.5 High
- onlinetechtools.com owos liteMultiple cross-site scripting (XSS) vulnerabilities in Online Work Order Suite (OWOS) Lite...4.3 Medium
- turnkeyforms yahoo-answers-cloneCross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows...4.3 Medium
- ecomstudio php photo vote1.3fCross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote...4.3 Medium
- ecomstudio php easy shopping cartCross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows...4.3 Medium
- typo3** DISPUTED ** SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to...7.5 High
- phpThe (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5...7.5 High
- campware.org campsiteSQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in...7.5 High
- php, opensuse, suse linux enterprise +2 moreThe dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream,...9.8 Critical
- csphere clansphereMultiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers...7.5 High
- phpThe addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...5.0 Medium
- clantigerSQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and...7.5 High
- Show moreLoading…