cve.nowby Sazabi

CVEs published April 23, 2010

28 CVEs were published on April 23, 2010: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 28
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 28
Now in CISA KEV: 0
Fix available: 1

Most affected products

org.apache.tomcat:tomcat: 1
svewap/a21glossary · wapplersystems/a21glossary: 1

Medium, low and unrated 28

CVE-2009-4801EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP…UnratedApr 23, 2010
CVE-2009-4802SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary…UnratedApr 23, 2010
CVE-2009-4803SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to…svewap/a21glossary · wapplersystems/a21glossaryUnratedApr 23, 2010
CVE-2009-4804Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used…UnratedApr 23, 2010
CVE-2009-4805Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary…UnratedApr 23, 2010
CVE-2009-4806admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which allows remote…UnratedApr 23, 2010
CVE-2009-4807Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via…UnratedApr 23, 2010
CVE-2009-4808admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by…UnratedApr 23, 2010
CVE-2009-4809Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to read arbitrary…UnratedApr 23, 2010
CVE-2009-4810The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the…UnratedApr 23, 2010
CVE-2010-1034Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 before 6.0.0-95 on Linux, and 6.0 before 6.0.0.96 on Windows, allows…UnratedApr 23, 2010
CVE-2010-1035Multiple unspecified vulnerabilities in HP Virtual Machine Manager (VMM) before 6.0 allow remote authenticated users to execute arbitrary…UnratedApr 23, 2010
CVE-2010-1157Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address…org.apache.tomcat:tomcatUnratedFix availableApr 23, 2010
CVE-2010-1491Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary…UnratedApr 23, 2010
CVE-2010-1492Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a ..UnratedApr 23, 2010
CVE-2010-1493SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to execute arbitrary…UnratedApr 23, 2010
CVE-2010-1494Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files…UnratedApr 23, 2010
CVE-2010-1495Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files…UnratedApr 23, 2010
CVE-2010-1496SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL…UnratedApr 23, 2010
CVE-2010-1497Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject arbitrary web…UnratedApr 23, 2010
CVE-2010-1498Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id…UnratedApr 23, 2010
CVE-2010-1499SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id…UnratedApr 23, 2010
CVE-2010-1500Google Chrome before 4.1.249.1059 does not properly support forms, which has unknown impact and attack vectors, related to a "type…UnratedApr 23, 2010
CVE-2010-1502Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to…UnratedApr 23, 2010
CVE-2010-1503Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or…UnratedApr 23, 2010

Show all 28 entriesShow fewer entries