CVEs published in December 2010
352 vulnerabilities, 92 critical, 4 exploited.
- anything-digital sh404sefCross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8...4.3 Medium
- anything-digital sh404sefSQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for...7.5 High
- devbits register-plusThe Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain...5.0 Medium
- devbits register-plusMultiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3...4.3 Medium
- dynpglanguages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via...5.0 Medium
- dynpgSQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute...7.5 High
- dynpgDirectory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when...4.3 Medium
- microsoft windows, windows 7, windows server 2003 +3 more +5 moreStack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft...7.8 High
- mono, novell moonlight +1 moreMono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly...7.5 High
- isc bindnamed in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which...5.0 Medium
- isc bindnamed in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6...6.4 Medium
- isc bindnamed in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3...4.0 Medium
- novo-ws orbis cmsUnrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows...6.0 Medium
- artica pandora fmsPHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1...7.5 High
- artica pandora fmsMultiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers...7.5 High
- artica pandora fmsIncomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS...7.5 High
- artica pandora fmsMultiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated...7.5 High
- artica pandora fmsThe default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the...10.0 High
- artica pandora fmsoperation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to...9.0 High
- nullsoft winampThe in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service ...4.3 Medium
- nullsoft winampThe in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service ...4.3 Medium
- nullsoft winampInteger overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an...9.3 High
- nullsoft winampBuffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an...9.3 High
- nullsoft winampMultiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to...9.3 High
- awstatsDirectory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an...6.4 Medium
- awstatsawstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which...7.5 High
- awstatsawstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote...7.5 High
- phpmyadminCross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib...4.3 Medium
- mit kerberos 5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the...2.1 Low
- mit kerberos 5MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...6.3 Medium
- ifdefined bugtracker.netMultiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated...6.5 Medium
- ifdefined bugtracker.netMultiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote...3.5 Low
- nullsoft winampMultiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote...9.3 High
- mit kerberos 5MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...3.7 Low
- awstatsOpen redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to...5.8 Medium
- abk-soft chameleon social networkingMultiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social...4.3 Medium
- harmistechnology com jeajaxeventcalendarSQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for...7.5 High
- dadabikDaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed...4.3 Medium
- mrcgiguy freeticketMultiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when...6.8 Medium
- micronetsoft rv dealer websiteMultiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers...7.5 High
- jurpo jurpopageCross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote...4.3 Medium
- jurpo jurpopageMultiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to...7.5 High
- jurpo jurpopageSQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute...7.5 High
- mrcgiguy guestbookMultiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0...4.3 Medium
- boka siteengineSQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute...7.5 High
- site2nite big truck brokerSQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote...7.5 High
- dadabikCross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit...3.5 Low
- webwiz web wiz newspadWeb Wiz NewsPad stores sensitive information under the web root with insufficient access control,...5.0 Medium
- boka siteengineOpen redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to...5.8 Medium
- boka siteengineThe phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by...5.0 Medium
- Show moreLoading…