CVEs published in July 2010
356 vulnerabilities, 58 critical, 1 exploited.
- topmanage olk moduleMultiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for...7.5 High
- customerparadigm pagedirector cmssiteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access,...7.5 High
- customerparadigm pagedirector cmsSQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote...7.5 High
- customerparadigm pagedirector cmsSQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote...7.5 High
- realtyna com realtynaDirectory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for...7.5 High
- joomla com sefPHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows...7.5 High
- harmistechnology com jesectionfinderDirectory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder)...6.8 Medium
- ruby-lang rubyBuffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain...7.2 High
- esoftpro online guestbook proSQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to...7.5 High
- esoftpro online photo proCross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote...4.3 Medium
- winterwebs ezwebitorMultiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to...7.5 High
- mpesch3.de1 1by1Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial...6.8 Medium
- bestwebsharing groovy media playerStack-based buffer overflow in Groovy Media Player 1.1.0 allows remote attackers to cause a...6.8 Medium
- sungard banner studentCross-site scripting (XSS) vulnerability in the twbkwbis.P_SecurityQuestion (aka Change Security...4.3 Medium
- sweetphp totalcalenderadmin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which...7.5 High
- sweetphp totalcalendarPHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote...7.5 High
- webmobo wbnewsWB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via...7.5 High
- esoftpro online contact managerMultiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact...4.3 Medium
- creasito e-commerce content managerMultiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce...6.8 Medium
- joomla com weblinks, joomla\! +1 moreSQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote...7.5 High
- guillermo vargas com xmapSQL injection vulnerability in xmap (com_xmap) component for Joomla! allows remote attackers to...7.5 High
- openwebanalytics open web analyticsPHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when...5.1 Medium
- openwebanalytics open web analyticsMultiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might...5.0 Medium
- alanzard tsoka\Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows...4.3 Medium
- alanzard tsoka\SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers...7.5 High
- devanaSQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote...7.5 High
- ez publishMultiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers...7.5 High
- ez publishCross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0...4.3 Medium
- brotherscripts recipe websiteSQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote...7.5 High
- novo-ws orbis cmsCross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2...4.3 Medium
- adaptivedisplays alpha ethernet adapter ii, alpha ethernet adapter ii web manager +1 moreUnspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2...6.4 Medium
- bogofilterMultiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer...5.0 Medium
- arne redlich \& ross walker iscsitarget, vladislav bolkhovitin generic scsi target subsystem, zaal tgt +2 moreMultiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework...5.0 Medium
- cisco ios, industrial ethernet 3000 +1 moreIOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a...10.0 High
- opera browserOpera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for...9.3 High
- opera browserCross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and...4.3 Medium
- opera browserOpera before 10.60 allows remote attackers to cause a denial of service (application hang) via...4.3 Medium
- opera browserOpera before 10.60 allows remote attackers to cause a denial of service (application hang) via an...4.3 Medium
- opera browserOpera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and...4.3 Medium
- opera browserOpera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly...4.3 Medium
- opera browserOpera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly...4.3 Medium
- opera browserOpera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes...4.3 Medium
- opera browserOpera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs,...4.3 Medium
- opera browserOpera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click...9.3 High
- ibm advanced management moduleThe IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly...5.0 Medium
- ibm advanced management moduleDirectory traversal vulnerability in private/file_management.php on the IBM BladeCenter with...4.0 Medium
- ibm advanced management moduleMultiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced...4.3 Medium
- freecivfreeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute...10.0 High
- avahiThe AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25...4.3 Medium
- google chromeGoogle Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers...5.0 Medium
- Show moreLoading…