Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
July

CVEs published in July 2010

356 vulnerabilities, 58 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

iscripts visualcasterSQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote...CVE-2010-2853Public exploit7.5 HighJuly 23, 2010
runcmsCross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php...CVE-2010-28522.6 LowJuly 23, 2010
ordasoft com booklibrarySQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and...CVE-2010-28517.5 HighJuly 23, 2010
nusoftware nubuilderDirectory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and...CVE-2010-2850Public exploit6.8 MediumJuly 23, 2010
nusoftware nubuilderCross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and...CVE-2010-28494.3 MediumJuly 23, 2010
gonzalo maser com artformsDirectory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the...CVE-2010-2848Public exploit5.0 MediumJuly 23, 2010
gonzalo maser com artformsMultiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7...CVE-2010-2847Public exploit7.5 HighJuly 23, 2010
gonzalo maser com artformsCross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2...CVE-2010-2846Public exploit4.3 MediumJuly 23, 2010
schlu.net com quickfaqSQL injection vulnerability in the QuickFAQ (com_quickfaq) component 1.0.3 for Joomla! allows...CVE-2010-2845Public exploit7.5 HighJuly 23, 2010
newanz newsofficeCross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows...CVE-2010-2844Public exploit4.3 MediumJuly 23, 2010
interspire activekbDirectory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers...CVE-2009-4957Public exploit7.5 HighJuly 22, 2010
wapplersystems ws statsCross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1...CVE-2009-49564.3 MediumJuly 22, 2010
thomas hempel th ultracardsSQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3...CVE-2009-49557.5 HighJuly 22, 2010
websedit sk calendarSQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension...CVE-2009-49547.5 HighJuly 22, 2010
stefan geith sg userdataCross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension...CVE-2009-49534.3 MediumJuly 22, 2010
serge gebhardt dir listingDirectory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and...CVE-2009-495210.0 HighJuly 22, 2010
hans olthoff alternet csa outUnspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0...CVE-2009-49515.0 MediumJuly 22, 2010
tim lochmueller \& thomas buss a21glossary advanced outputSQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output)...CVE-2009-49507.5 HighJuly 22, 2010
joachim ruhs locatorSQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote...CVE-2009-49497.5 HighJuly 22, 2010
joachim ruhs locatorCross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3...CVE-2009-49484.3 MediumJuly 22, 2010
q2solutions connxSQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606...CVE-2009-49477.5 HighJuly 22, 2010
thetricky com messagingDirectory traversal vulnerability in the Messaging (com_messaging) component before 1.5.1 for...CVE-2009-49466.8 MediumJuly 22, 2010
siemens simatic wincc, simatic pcs 7 +1 moreSiemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users...CVE-2010-27727.8 HighJuly 22, 2010
microsoft windows, windows 7, windows xp +3 more +5 moreWindows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2...CVE-2010-2568In KEVPublic exploitEPSS 89.6%9.3 HighJuly 22, 2010
atutor acollabAdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for...CVE-2009-49457.5 HighJuly 22, 2010
atutor acollabMultiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to...CVE-2009-49444.3 MediumJuly 22, 2010
impactsoftcompany adpeepsindex.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a...CVE-2009-49435.0 MediumJuly 22, 2010
atutor acollabCross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack...CVE-2009-49424.3 MediumJuly 22, 2010
atutor acollabCross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote...CVE-2009-49414.3 MediumJuly 22, 2010
zeuscartSQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to...CVE-2009-4940Public exploit7.5 HighJuly 22, 2010
impactsoftcompany adpeepsMultiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote...CVE-2009-4939Public exploit4.3 MediumJuly 22, 2010
warphd com jvideoSQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for...CVE-2009-49387.5 HighJuly 22, 2010
spirate small pirateCross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to...CVE-2009-49374.3 MediumJuly 22, 2010
spirate small pirateMultiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to...CVE-2009-4936Public exploit7.5 HighJuly 22, 2010
ibm soliddbsolid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a...CVE-2010-277110.0 HighJuly 22, 2010
vmware studioMultiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in...CVE-2010-26676.0 MediumJuly 22, 2010
vmware studioVMware Studio 2.0 does not properly write to temporary files, which allows local users to gain...CVE-2010-24274.4 MediumJuly 22, 2010
gnu gvGNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a...CVE-2010-2056Fix available3.3 LowJuly 22, 2010
artifex afpl ghostscript, ghostscript fonts, gpl ghostscript +2 moreGhostscript 8.71 and earlier reads initialization files from the current working directory, which...CVE-2010-2055Fix available7.2 HighJuly 22, 2010
hp openvmsUnspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on...CVE-2010-19736.8 MediumJuly 22, 2010
hp client automation enterprise infrastructureThe default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia)...CVE-2010-19729.0 HighJuly 22, 2010
hp virtual connect enterprise managerCross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows...CVE-2010-19694.3 MediumJuly 22, 2010
digia qt, webkit +1 moreOff-by-one error in the WebSocketHandshake::readServerHandshake function in websockets...CVE-2010-17667.5 HighJuly 22, 2010
artifex afpl ghostscript, ghostscript fonts, gpl ghostscript +2 moreBuffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to...CVE-2009-4897Fix available9.3 HighJuly 22, 2010
mlmmjMultiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing...CVE-2009-4896Fix available6.5 MediumJuly 20, 2010
hp insight software installerCross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows...CVE-2010-19716.8 MediumJuly 14, 2010
hp insight software installerUnspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local...CVE-2010-19704.6 MediumJuly 14, 2010
hp insight software installerCross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows...CVE-2010-19686.8 MediumJuly 14, 2010
hp insight software installerUnspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local...CVE-2010-19673.6 LowJuly 14, 2010
hp insight controlUnspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows...CVE-2010-19664.6 MediumJuly 14, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open