Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
May

CVEs published in May 2010

402 vulnerabilities, 54 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft dynamics gpMicrosoft Dynamics GP has a default value of ACCESS for the system password, which might make it...CVE-2010-20834.0 MediumMay 26, 2010
cisco scientific atlanta webstar dpc2100r2The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0...CVE-2010-20825.0 MediumMay 26, 2010
cisco scientific atlanta webstar dpc2100r2The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0...CVE-2010-20266.4 MediumMay 26, 2010
cisco scientific atlanta webstar dpc2100r2Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco...CVE-2010-2025Public exploit6.8 MediumMay 26, 2010
daniel mealha cabrita ziproxyMultiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to...CVE-2010-1513Fix available6.8 MediumMay 26, 2010
clamavOff-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote...CVE-2010-1640Fix available4.3 MediumMay 26, 2010
clamavThe cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause...CVE-2010-1639Fix available4.3 MediumMay 26, 2010
novell access managerThe Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active...CVE-2009-48794.3 MediumMay 26, 2010
novell access managerUnspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1...CVE-2009-48784.3 MediumMay 26, 2010
plainblack webguiMultiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote...CVE-2009-48776.8 MediumMay 26, 2010
netrix cmsadmin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a...CVE-2009-4876Public exploit5.0 MediumMay 26, 2010
frederico caldeira knabben fckeditor.javaFCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a...CVE-2009-48755.0 MediumMay 26, 2010
scripts.oldguy talkbackTalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php),...CVE-2009-4874Public exploit6.4 MediumMay 26, 2010
rhinosoft serv-uStack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows...CVE-2009-4873Public exploitEPSS 20.6%10.0 HighMay 26, 2010
magnoware datatrack systemDataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions,...CVE-2010-20795.0 MediumMay 25, 2010
magnoware datatrack systemDataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2)...CVE-2010-20785.0 MediumMay 25, 2010
debliteck dbcartSQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute...CVE-2010-2051Public exploit7.5 HighMay 25, 2010
m0r0n com mscommentDirectory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8...CVE-2010-2050Public exploitEPSS 13.1%7.5 HighMay 25, 2010
manageengine adaudit plusCross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine...CVE-2010-20494.3 MediumMay 25, 2010
menhir heartbeatMultiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9...CVE-2010-20483.5 LowMay 25, 2010
joenasejes je cmsSQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to...CVE-2010-2047Public exploit7.5 HighMay 25, 2010
activehelper com activehelper livehelpMultiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp ...CVE-2010-20464.3 MediumMay 25, 2010
dionesoft com dioneformwizardDirectory traversal vulnerability in the Dione Form Wizard (aka FDione or com_dioneformwizard)...CVE-2010-2045Public exploit7.5 HighMay 25, 2010
adhie utomo com konsultasiSQL injection vulnerability in the Konsultasi (com_konsultasi) component 1.0.0 for Joomla! allows...CVE-2010-2044Public exploit7.5 HighMay 25, 2010
magnoware datatrack systemCross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4...CVE-2010-20434.3 MediumMay 25, 2010
shopex ecshopSQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute...CVE-2010-2042Public exploit7.5 HighMay 25, 2010
php-calendarMultiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7...CVE-2010-20414.3 MediumMay 25, 2010
v-eva shopzilla affiliate script phpCross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP...CVE-2010-2040Public exploit4.3 MediumMay 25, 2010
gpeasy cmsCross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows...CVE-2010-2039Public exploit6.8 MediumMay 25, 2010
gpeasy cmsCross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2...CVE-2010-2038Public exploit2.1 LowMay 25, 2010
percha com perchadownloadsattachDirectory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach)...CVE-2010-2037Public exploitEPSS 11.1%7.5 HighMay 25, 2010
percha com perchafieldsattachDirectory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component...CVE-2010-2036Public exploitEPSS 13.2%7.5 HighMay 25, 2010
percha com perchagalleryDirectory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta...CVE-2010-2035Public exploitEPSS 15.8%7.5 HighMay 25, 2010
percha com perchaimageattachDirectory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1...CVE-2010-2034Public exploitEPSS 11.1%7.5 HighMay 25, 2010
percha com perchacategoriestreeDirectory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree)...CVE-2010-2033Public exploitEPSS 15.8%7.5 HighMay 25, 2010
caucho resinMultiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho...CVE-2010-2032Public exploit4.3 MediumMay 24, 2010
kingsoft webshieldKAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows...CVE-2010-2031Public exploit7.2 HighMay 24, 2010
alan palazzolo external link pageCross-site scripting (XSS) vulnerability in the External Link Page module 5.x before 5.x-1.0 and...CVE-2010-20304.3 MediumMay 24, 2010
cybozu dotsales, office +1 moreCybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows...CVE-2010-20295.8 MediumMay 24, 2010
mgenti tftputil guiBuffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to...CVE-2010-2028Public exploitEPSS 13.9%10.0 HighMay 24, 2010
wolfram research mathematicaMathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a...CVE-2010-20271.9 LowMay 24, 2010
2brightsparks syncbackStack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other...CVE-2010-1688Public exploitEPSS 15.0%9.3 HighMay 24, 2010
gnu gnutlsThe _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2...CVE-2006-7239Fix available5.0 MediumMay 24, 2010
bukulokomedia lokomedia cmsSQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic_quotes_gpc is...CVE-2010-20196.8 MediumMay 24, 2010
bukulokomedia lokomedia cmsDirectory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote...CVE-2010-2018Public exploit5.0 MediumMay 24, 2010
bukulokomedia lokomedia cmsCross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0...CVE-2010-20174.3 MediumMay 24, 2010
imagetraders iceberg cmsSQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute...CVE-2010-2016Public exploit7.5 HighMay 24, 2010
createch-group lisk cmsMultiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute...CVE-2010-2015Public exploit6.8 MediumMay 24, 2010
createch-group lisk cmsCross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote...CVE-2010-20144.3 MediumMay 24, 2010
createch-group lisk cmsCross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote...CVE-2010-20134.3 MediumMay 24, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open