CVEs published in December 2010

352 vulnerabilities, 92 critical, 4 exploited.

• xwiki Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers... CVE-2010-4642 4.3 MediumDecember 30, 2010
• xwiki SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute... CVE-2010-4641 7.5 HighDecember 30, 2010
• xwiki watch Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to... CVE-2010-4640 4.3 MediumDecember 30, 2010
• intendance mysource matrix SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute... CVE-2010-4639 7.5 HighDecember 30, 2010
• iptechinside com jquarks4s SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s ... CVE-2010-4638 Public exploit 6.8 MediumDecember 30, 2010
• finalcut feedlist Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2... CVE-2010-4637 4.3 MediumDecember 30, 2010
• site2nite business e-listings SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote... CVE-2010-4636 Public exploit 7.5 HighDecember 30, 2010
• site2nite vacation rental listings SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows... CVE-2010-4635 Public exploit 7.5 HighDecember 30, 2010
• enhancesoft osticket ** DISPUTED ** Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read... CVE-2010-4634 Disputed 5.0 MediumDecember 30, 2010
• sumeffect digishop SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute... CVE-2010-4633 Public exploit 7.5 HighDecember 30, 2010
• pilotcart pilot cart Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to... CVE-2010-4632 Public exploit 7.5 HighDecember 30, 2010
• pilotcart pilot cart Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote... CVE-2010-4631 Public exploit 4.3 MediumDecember 30, 2010
• fubra wp-survey-and-quiz-tool Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And... CVE-2010-4630 4.3 MediumDecember 30, 2010
• mybb MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join... CVE-2010-4629 5.0 MediumDecember 30, 2010
• mybb member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the... CVE-2010-4628 5.0 MediumDecember 30, 2010
• mybb Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard)... CVE-2010-4627 6.8 MediumDecember 30, 2010
• mybb The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not... CVE-2010-4626 5.1 MediumDecember 30, 2010
• mybb MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible... CVE-2010-4625 5.0 MediumDecember 30, 2010
• mybb MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended... CVE-2010-4624 3.5 LowDecember 30, 2010
• mybb Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6... CVE-2010-4522 4.3 MediumDecember 30, 2010
• redhat jboss enterprise application platform, jboss remoting, jboss enterprise web platform +2 more The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run... CVE-2010-4265 Fix available 2.6 LowDecember 30, 2010
• mitsu hiro hi rose attachecase Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain... CVE-2010-3923 6.9 MediumDecember 30, 2010
• redhat jboss enterprise application platform Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise... CVE-2010-3878 4.3 MediumDecember 30, 2010
• redhat jboss enterprise application platform, jboss enterprise web platform, jboss remoting +2 more The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run... CVE-2010-3862 Fix available 2.6 LowDecember 30, 2010
• redhat jboss enterprise application platform, jboss enterprise soa platform +1 more Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP CVE-2010-3708 Fix available 7.5 HighDecember 30, 2010
• ibm tivoli access manager for e-business WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows... CVE-2010-4623 4.0 MediumDecember 30, 2010
• ibm tivoli access manager for e-business Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1... CVE-2010-4622 5.0 MediumDecember 30, 2010
• clear clearspot, ispot, clearspot firmware +1 more +3 more Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the... CVE-2010-4507 Public exploit 9.3 HighDecember 30, 2010
• d-bus project d-bus Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a... CVE-2010-4352 Fix available 2.1 LowDecember 30, 2010
• linux kernel, suse linux enterprise server +1 more The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when... CVE-2010-4342 7.1 HighDecember 30, 2010
• novell iprint client Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52... CVE-2010-4321 Public exploit EPSS 32.6% 9.3 HighDecember 30, 2010
• livezilla Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates... CVE-2010-4276 Public exploit 4.3 MediumDecember 30, 2010
• linux kernel, fedoraproject fedora, opensuse +4 more +6 more The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly... CVE-2010-4258 Public exploit 6.2 MediumDecember 30, 2010
• linux kernel, redhat enterprise linux +1 more The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2... CVE-2010-4161 4.9 MediumDecember 30, 2010
• linux kernel, fedoraproject fedora, opensuse +4 more +6 more The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not... CVE-2010-4158 Public exploit 2.1 LowDecember 30, 2010
• webscripti mafya oyun scrpti SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows... CVE-2010-4619 Public exploit 7.5 HighDecember 29, 2010
• algisinfo aicontactsafe Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14... CVE-2010-4618 4.3 MediumDecember 29, 2010
• kanich com jotloader Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla!... CVE-2010-4617 Public exploit 6.8 MediumDecember 29, 2010
• impresscms ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter CVE-2010-4616 Fix available 4.3 MediumDecember 29, 2010
• iskenderaltuntas oto galeri sistemi Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to... CVE-2010-4615 Public exploit 7.5 HighDecember 29, 2010
• mhproducts ero auktion SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute... CVE-2010-4614 Public exploit 7.5 HighDecember 29, 2010
• hycus cms Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include... CVE-2010-4613 Public exploit 7.5 HighDecember 29, 2010
• hycus cms Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is... CVE-2010-4612 Public exploit 6.8 MediumDecember 29, 2010
• html-edit cms Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request... CVE-2010-4611 Public exploit 5.0 MediumDecember 29, 2010
• html-edit cms Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote... CVE-2010-4610 Public exploit 4.3 MediumDecember 29, 2010
• html-edit cms SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to... CVE-2010-4609 Public exploit 7.5 HighDecember 29, 2010
• habariproject habari Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1)... CVE-2010-4608 Public exploit 5.0 MediumDecember 29, 2010
• habariproject habari Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is... CVE-2010-4607 Public exploit 2.6 LowDecember 29, 2010
• ibm tivoli storage manager Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management ... CVE-2010-4606 7.5 HighDecember 29, 2010
• ibm tivoli storage manager Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x... CVE-2010-4605 6.6 MediumDecember 29, 2010
• Show olderLoading…