CVEs published in July 2010

356 vulnerabilities, 58 critical, 1 exploited.

• kvirc The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ ... CVE-2010-2785 Public exploitFix available 6.5 MediumJuly 31, 2010
• osgeo mapserver mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict... CVE-2010-2540 Fix available 10.0 HighJuly 31, 2010
• osgeo mapserver Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and... CVE-2010-2539 Fix available 2.1 LowJuly 31, 2010
• solucija snews SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute... CVE-2010-2926 Public exploit 7.5 HighJuly 30, 2010
• openfreeway freeway SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to... CVE-2010-2925 Public exploit 7.5 HighJuly 30, 2010
• silvercover mylinksdump plugin SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows... CVE-2010-2924 Public exploit 7.5 HighJuly 30, 2010
• prasanna com youtube SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote... CVE-2010-2923 Public exploit 7.5 HighJuly 30, 2010
• ali kenan aky blog SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute... CVE-2010-2922 Public exploit 7.5 HighJuly 30, 2010
• photoindochina com golfcourseguide SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta... CVE-2010-2921 Public exploit 7.5 HighJuly 30, 2010
• foobla com foobla suggestions Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1... CVE-2010-2920 Public exploit 6.8 MediumJuly 30, 2010
• joomlaxt com staticxt SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote... CVE-2010-2919 Public exploit 7.5 HighJuly 30, 2010
• visocrea com joomla visites PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites ... CVE-2010-2918 Public exploit EPSS 13.7% 7.5 HighJuly 30, 2010
• ajsquare aj article Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0... CVE-2010-2917 Public exploit 4.3 MediumJuly 30, 2010
• ajsquare aj hyip SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to... CVE-2010-2916 Public exploit 7.5 HighJuly 30, 2010
• ajsquare aj hyip SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to... CVE-2010-2915 Public exploit 7.5 HighJuly 30, 2010
• nessus web server plugin Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server... CVE-2010-2914 4.3 MediumJuly 30, 2010
• mozilla firefox, seamonkey, thunderbird +2 more Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,... CVE-2010-2752 Public exploit 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and... CVE-2010-1796 2.6 LowJuly 30, 2010
• apple safari, webkit +1 more Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5... CVE-2010-1793 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1792 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and... CVE-2010-1791 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1790 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6... CVE-2010-1789 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1788 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1787 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6... CVE-2010-1786 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1785 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple... CVE-2010-1784 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1783 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1... CVE-2010-1782 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6... CVE-2010-1780 9.3 HighJuly 30, 2010
• apple safari, webkit +1 more Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10... CVE-2010-1778 4.3 MediumJuly 30, 2010
• mozilla firefox, thunderbird +1 more Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement... CVE-2010-1215 6.8 MediumJuly 30, 2010
• mozilla firefox, seamonkey, thunderbird +2 more The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7... CVE-2010-1213 4.3 MediumJuly 30, 2010
• mozilla firefox, thunderbird +1 more js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3... CVE-2010-1212 9.3 HighJuly 30, 2010
• mozilla firefox, thunderbird +1 more intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before... CVE-2010-1210 4.3 MediumJuly 30, 2010
• mozilla firefox, seamonkey +1 more Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3... CVE-2010-1209 9.3 HighJuly 30, 2010
• mozilla firefox, thunderbird +1 more Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read... CVE-2010-1207 4.3 MediumJuly 30, 2010
• citibank citi mobile The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows... CVE-2010-2913 2.1 LowJuly 29, 2010
• mozilla firefox layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the... CVE-2010-2755 Fix available 10.0 HighJuly 29, 2010
• pidgin The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin... CVE-2010-2528 Fix available 4.0 MediumJuly 29, 2010
• apple itunes Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or... CVE-2010-1777 9.3 HighJuly 29, 2010
• kayako esupport SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to... CVE-2010-2912 Public exploit 7.5 HighJuly 28, 2010
• kayako esupport SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to... CVE-2010-2911 Public exploit 7.5 HighJuly 28, 2010
• alexred com oziogallery SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows... CVE-2010-2910 Public exploit 7.5 HighJuly 28, 2010
• toughtomato com ttvideo SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla!... CVE-2010-2909 Public exploit 7.5 HighJuly 28, 2010
• joomdle com joomdle SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla!... CVE-2010-2908 Public exploit 7.5 HighJuly 28, 2010
• huruhelpdesk com huruhelpdesk SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows... CVE-2010-2907 Public exploit 7.5 HighJuly 28, 2010
• brotherscripts scripts directory SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts... CVE-2010-2906 Public exploit 7.5 HighJuly 28, 2010
• brotherscripts scripts directory SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory... CVE-2010-2905 Public exploit 7.5 HighJuly 28, 2010
• Show olderLoading…