Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
June

CVEs published in June 2010

490 vulnerabilities, 145 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

splunkMultiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1...CVE-2010-25027.5 HighJune 28, 2010
mozilla bugzillaInstall/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is...CVE-2010-24701.9 LowJune 28, 2010
moodleCross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module...CVE-2010-22316.8 MediumJune 28, 2010
moodleMoodle Cross-site Scripting vulnerability in the KSES text cleaning filterCVE-2010-2230Fix available4.0 MediumJune 28, 2010
moodleMultiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and...CVE-2010-22294.3 MediumJune 28, 2010
moodleCross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1...CVE-2010-22284.3 MediumJune 28, 2010
novell imanagerOff-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a...CVE-2010-1930Public exploit5.0 MediumJune 28, 2010
novell imanagerMultiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20...CVE-2010-1929Public exploitEPSS 16.1%9.0 HighJune 28, 2010
mozilla bugzillaSearch.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7...CVE-2010-12045.0 MediumJune 28, 2010
mozilla bugzillaInstall/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses...CVE-2010-01801.9 LowJune 28, 2010
kvircDirectory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote...CVE-2010-2452Fix available9.3 HighJune 27, 2010
kvircMultiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have...CVE-2010-2451Fix available10.0 HighJune 27, 2010
linearcorp emerge 50, emerge 5000 +1 moreThe Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which...CVE-2010-24695.0 MediumJune 25, 2010
linearcorp emerge 50, s2sys netbox, sonitrol eaccess +1 more +3 moreThe S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol...CVE-2010-246810.0 HighJune 25, 2010
linearcorp emerge 50, s2sys netbox, sonitrol eaccess +1 more +3 moreThe S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the...CVE-2010-24675.0 MediumJune 25, 2010
linearcorp emerge 50, s2sys netbox, sonitrol eaccess +1 more +3 moreThe S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the...CVE-2010-24665.0 MediumJune 25, 2010
linearcorp emerge 50, s2sys netbox, sonitrol eaccess +1 more +3 moreThe S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the...CVE-2010-24655.0 MediumJune 25, 2010
rsjoomla com rscommentsMultiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component...CVE-2010-2464Public exploit4.3 MediumJune 25, 2010
jamroomCross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote...CVE-2010-2463Public exploit4.3 MediumJune 25, 2010
tomacero orohyipSQL injection vulnerability in withdraw_money.php in Toma Cero OroHYIP allows remote attackers to...CVE-2010-2462Public exploit7.5 HighJune 25, 2010
jce-tech overstock scriptSQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to...CVE-2010-2461Public exploit7.5 HighJune 25, 2010
jce-tech shareasale scriptSQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1...CVE-2010-2460Public exploit7.5 HighJune 25, 2010
2daybiz video community portal scriptSQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows...CVE-2010-2459Public exploit7.5 HighJune 25, 2010
2daybiz video community portal scriptCross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1...CVE-2010-2458Public exploit4.3 MediumJune 25, 2010
qsoft-inc k-searchCross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to...CVE-2010-2457Public exploit4.3 MediumJune 25, 2010
codelib linker imgMultiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow...CVE-2010-2456Public exploit6.8 MediumJune 25, 2010
opera browserOpera does not properly manage the address bar between the request to open a URL and the...CVE-2010-24554.3 MediumJune 25, 2010
apple safariApple Safari does not properly manage the address bar between the request to open a URL and the...CVE-2010-24544.3 MediumJune 25, 2010
mozilla firefox, seamonkey +1 moreThe startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before...CVE-2010-12064.3 MediumJune 25, 2010
dootzky oblogadmin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks...CVE-2009-49096.8 MediumJune 25, 2010
dootzky oblogMultiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject...CVE-2009-4908Public exploit4.3 MediumJune 25, 2010
dootzky oblogMultiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to...CVE-2009-4907Public exploit6.8 MediumJune 25, 2010
accscripts acc php emailCross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote...CVE-2009-4906Public exploit6.8 MediumJune 25, 2010
accscripts acc statisticsMultiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1...CVE-2009-4905Public exploit6.8 MediumJune 25, 2010
dootzky oblogarticle.php in oBlog does not properly restrict comments, which allows remote attackers to cause...CVE-2009-49045.0 MediumJune 25, 2010
dootzky oblogCross-site scripting (XSS) vulnerability in index.php in oBlog allows remote attackers to inject...CVE-2009-49034.3 MediumJune 25, 2010
maradnsparse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle...CVE-2010-2444Fix available4.3 MediumJune 25, 2010
ponsoftware explzhBuffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows...CVE-2010-24349.3 HighJune 25, 2010
libtiffThe OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers...CVE-2010-2443Fix available5.0 MediumJune 24, 2010
microsoft internet explorerMicrosoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows...CVE-2010-2442EPSS 11.6%4.3 MediumJune 24, 2010
apple webkitWebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes...CVE-2010-24414.3 MediumJune 24, 2010
upredsun subtitle translation wizardStack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user...CVE-2010-2440Public exploit9.3 HighJune 24, 2010
moreforge moreampStack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a...CVE-2010-2439Public exploit9.3 HighJune 24, 2010
laubrotel g.cms generatorSQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL...CVE-2010-2438Public exploit7.5 HighJune 24, 2010
anecms blogCross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly...CVE-2010-2437Public exploit4.3 MediumJune 24, 2010
anecms blogSQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier...CVE-2010-2436Public exploit7.5 HighJune 24, 2010
salvo tomaselli weborf http serverWeborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash...CVE-2010-2435Public exploitFix available5.0 MediumJune 24, 2010
redhat enterprise virtualization managerThe snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M)...CVE-2010-22242.1 LowJune 24, 2010
redhat enterprise virtualization hypervisorVirtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H...CVE-2010-2223Fix available2.1 LowJune 24, 2010
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere...CVE-2010-07794.3 MediumJune 24, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open