cve.nowby Sazabi

CVEs published July 22, 2010

34 CVEs were published on July 22, 2010: 0 critical, 1 high. 1 is now in CISA KEV.

Published: 34
Critical: 0
High: 1
Medium: 0
Low: 0
Unrated: 33
Now in CISA KEV: 1
Fix available: 0

High 1

CVE-2010-2568Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or rHigh · 7.8KEVJul 22, 2010

Medium, low and unrated 33

CVE-2009-4946Directory traversal vulnerability in the Messaging (com_messaging) component before 1.5.1 for Joomla! allows remote attackers to include…UnratedJul 22, 2010
CVE-2009-4947SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers to execute…UnratedJul 22, 2010
CVE-2009-4948Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary…UnratedJul 22, 2010
CVE-2009-4949SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL…UnratedJul 22, 2010
CVE-2009-4950SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 for TYPO3 allows…UnratedJul 22, 2010
CVE-2009-4951Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3 allows remote…UnratedJul 22, 2010
CVE-2009-4952Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows remote attackers to…UnratedJul 22, 2010
CVE-2009-4953Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote…UnratedJul 22, 2010
CVE-2009-4954SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 allows remote…UnratedJul 22, 2010
CVE-2009-4955SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute…UnratedJul 22, 2010
CVE-2009-4956Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows remote attackers to…UnratedJul 22, 2010
CVE-2009-4957Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly…UnratedJul 22, 2010
CVE-2009-4936Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL commands via (1) the…UnratedJul 22, 2010
CVE-2009-4937Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via…UnratedJul 22, 2010
CVE-2009-4938SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute…UnratedJul 22, 2010
CVE-2009-4939Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or…UnratedJul 22, 2010
CVE-2009-4940SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the…UnratedJul 22, 2010
CVE-2009-4941Cross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary web script or HTML…UnratedJul 22, 2010
CVE-2009-4942Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for…UnratedJul 22, 2010
CVE-2009-4943index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid…UnratedJul 22, 2010
CVE-2009-4944Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via…UnratedJul 22, 2010
CVE-2009-4945AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via…UnratedJul 22, 2010
CVE-2010-2772Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain…UnratedJul 22, 2010
CVE-2009-4897Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of…UnratedJul 22, 2010
CVE-2010-1766Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before…UnratedJul 22, 2010

Show all 33 entriesShow fewer entries