CVEs published in May 2010
402 vulnerabilities, 54 critical, 0 exploited.
- sebrac.webcindario migascmsSQL injection vulnerability in function.php in MigasCMS 1.1, when magic_quotes_gpc is disabled,...6.8 Medium
- microsoft dynamics gpMicrosoft Dynamics GP uses a substitution cipher to encrypt the system password field and...4.0 Medium
- chaos tool suite project ctoolsMultiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6...4.3 Medium
- chaos tool suite project ctoolsThe auto-complete functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4...3.5 Low
- chaos tool suite project ctoolsMultiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools)...6.8 Medium
- chaos tool suite project ctoolsMultiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka...6.0 Medium
- apple java 1.5, java 1.6 +1 moreInteger signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5...6.8 Medium
- apple javaApple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not...6.8 Medium
- bsplayer bs.playerStack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41...9.3 High
- mysqlMySQL before 5.1.46 allows local users to delete the data and index files of another user's...3.6 Low
- linux kernelarch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6...1.9 Low
- linux kernelgfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the...4.9 Medium
- letodmsMultiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and...6.8 Medium
- letodmsDirectory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and...6.5 Medium
- datalifecms datalife engineMultiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote...7.5 High
- bsplayer bs.playerStack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other...9.3 High
- proxy2 advanced pollCross-site scripting (XSS) vulnerability in misc/get_admin.php in Advanced Poll 2.08 allows...4.3 Medium
- addison berry wordfilterCross-site scripting (XSS) vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x...2.1 Low
- ninjitsuweb civiregisterCross-site scripting (XSS) vulnerability in the CiviRegister module before 6.x-1.1 for Drupal...2.6 Low
- ron jerome bibliographyCross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17...2.1 Low
- openmairie opencatalogueDirectory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when...6.8 Medium
- kevinhankens tablefieldCross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for...2.1 Low
- saurus cmsCross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote...2.1 Low
- tomatocmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow...2.1 Low
- tomatocmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow...2.1 Low
- tomatocmsSQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to...7.5 High
- opera browserOpera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute,...5.0 Medium
- google chromeGoogle Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a...5.0 Medium
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in...5.0 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in...5.0 Medium
- opera browserOpera 9.52 executes a mail application in situations where an IMG element has a SRC attribute...5.0 Medium
- mozilla firefoxMozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service ...10.0 High
- mozilla firefoxMozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service ...5.0 Medium
- mozilla firefoxMozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service ...5.0 Medium
- ibm aix, vios, sgi irix +1 more +3 moreFormat string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and...10.0 High
- dovecotUnspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a...5.0 Medium
- sixapart movable typeMultiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six...4.3 Medium
- phpbbphpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."7.5 High
- phorumCross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to...4.3 Medium
- artifex gpl ghostscriptGhostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute...9.3 High
- phpbbphpBB 3.0.7 allows remote attackers to bypass intended access restrictions4.3 Medium
- michael nichols taxonomy breadcrumbCross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and...2.1 Low
- redcomponent com redtwitterDirectory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1...7.5 High
- joomlart com javoiceDirectory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows...5.0 Medium
- fabrikar fabrikDirectory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows...6.8 Medium
- roberto aloi com joomlaflickrDirectory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr)...7.5 High
- affiliatefeeds com datafeedsDirectory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880...6.8 Medium
- freephpblogsoftwarePHP remote file inclusion vulnerability in default_theme.php in FreePHPBlogSoftware 1.0, when...6.8 Medium
- gohigheris com jwhmcsDirectory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for...7.5 High
- michael nichols taxonomy breadcrumbCross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for...2.1 Low
- Show moreLoading…