Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2010

56 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2010-1653
    34Monitor

    Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attacke

    HighCVSS 7.5Proof of conceptEPSS 13%

    joomla · joomla\!May 3, 2010

  • CVE-2010-1657
    26Monitor

    Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary fil

    MediumCVSS 5.0Proof of conceptEPSS 18%

    recly · com smartsiteMay 3, 2010

  • CVE-2010-1658
    25Monitor

    Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read

    MediumCVSS 5.0Proof of conceptEPSS 16%

    code-garage · com noticeboardMay 3, 2010

  • CVE-2010-1659
    24Monitor

    Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to rea

    MediumCVSS 5.0Proof of conceptEPSS 13%

    joomla · joomla\!May 3, 2010

  • CVE-2010-1663
    56Plan

    The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Orig

    CriticalCVSS 10.0Proof of conceptEPSS 54%

    google · chromeMay 3, 2010

  • CVE-2010-1714
    26Monitor

    Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary

    MediumCVSS 5.0Proof of conceptEPSS 18%

    joomla · joomla\!May 4, 2010

  • CVE-2010-1717
    37Monitor

    Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary

    HighCVSS 7.5Proof of conceptEPSS 22%

    if surfalert project · if surfalertMay 4, 2010

  • CVE-2010-1681
    50Plan

    Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code

    HighCVSS 7.6WeaponizedEPSS 67%

    microsoft · visioMay 6, 2010

  • CVE-2010-1549
    63This week

    Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute

    CriticalCVSS 10.0WeaponizedEPSS 77%

    hp · loadrunnerMay 7, 2010

  • CVE-2009-4850
    44Plan

    The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value wi

    CriticalCVSS 9.3WeaponizedEPSS 24%

    awingsoft · awakening winds3d viewer pluginMay 7, 2010

  • CVE-2010-1173
    34Monitor

    The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remot

    HighCVSS 7.1Proof of conceptEPSS 21%

    linux · linux kernelMay 7, 2010

  • CVE-2010-1858
    24Monitor

    Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitr

    MediumCVSS 5.0Proof of conceptEPSS 13%

    joomla · joomla\!May 7, 2010

  • CVE-2010-1875
    35Monitor

    Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to re

    HighCVSS 7.5Proof of conceptEPSS 15%

    joomla · joomla\!May 12, 2010

  • CVE-2010-1878
    33Monitor

    Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files

    HighCVSS 7.5Proof of conceptEPSS 11%

    joomla · joomla\!May 12, 2010

  • CVE-2010-0815
    44Plan

    VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · visual basic for applicationsMay 12, 2010

  • CVE-2010-0816
    43Plan

    Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vi

    CriticalCVSS 9.3Proof of conceptEPSS 20%

    microsoft · outlook expressMay 12, 2010

  • CVE-2010-0987
    38Monitor

    Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted em

    HighCVSS 8.8No exploitEPSS 11%

    adobe · shockwave playerMay 13, 2010

  • CVE-2010-1280
    40Plan

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    HighCVSS 8.8Proof of conceptEPSS 16%

    adobe · shockwave playerMay 13, 2010

  • CVE-2010-1550
    44Plan

    Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers

    CriticalCVSS 10.0No exploitEPSS 11%

    hp · openview network node managerMay 13, 2010

  • CVE-2010-1551
    44Plan

    Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV N

    CriticalCVSS 10.0No exploitEPSS 13%

    hp · openview network node managerMay 13, 2010

  • CVE-2010-1552
    60This week

    Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow

    CriticalCVSS 10.0WeaponizedEPSS 67%

    hp · openview network node managerMay 13, 2010

  • CVE-2010-1553
    61This week

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    CriticalCVSS 10.0WeaponizedEPSS 70%

    hp · openview network node managerMay 13, 2010

  • CVE-2010-1554
    60This week

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    CriticalCVSS 10.0WeaponizedEPSS 65%

    hp · openview network node managerMay 13, 2010

  • CVE-2010-1555
    59Plan

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    CriticalCVSS 10.0WeaponizedEPSS 62%

    hp · openview network node managerMay 13, 2010

  • CVE-2010-1939
    34Monitor

    Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to crea

    HighCVSS 7.6Proof of conceptEPSS 14%

    apple · safariMay 13, 2010

  • CVE-2009-3678
    41Plan

    Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, whe

    CriticalCVSS 9.3No exploitEPSS 12%

    microsoft · windows 7May 14, 2010

  • CVE-2010-1952
    34Monitor

    Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remot

    HighCVSS 7.5Proof of conceptEPSS 12%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1953
    35Monitor

    Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arb

    HighCVSS 7.5Proof of conceptEPSS 16%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1954
    35Monitor

    Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers t

    HighCVSS 7.5Proof of conceptEPSS 16%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1955
    35Monitor

    Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read a

    HighCVSS 7.5Proof of conceptEPSS 17%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1956
    35Monitor

    Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 17%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1957
    34Monitor

    Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrar

    HighCVSS 7.5Proof of conceptEPSS 14%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1979
    30Monitor

    Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remote attackers to read

    MediumCVSS 6.8Proof of conceptEPSS 11%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1980
    36Monitor

    Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla! allows remote atta

    HighCVSS 7.5Proof of conceptEPSS 18%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1981
    31Monitor

    Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a

    MediumCVSS 6.8Proof of conceptEPSS 11%

    fabrikar · fabrikMay 19, 2010

  • CVE-2010-1983
    36Monitor

    Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 18%

    joomla · joomla\!May 19, 2010

  • CVE-2010-1039
    46Plan

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCp

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    ibm · aixMay 20, 2010

  • CVE-2010-1991
    23Monitor

    Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mai

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · ieMay 20, 2010

  • CVE-2010-2011
    19Monitor

    Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier fo

    MediumCVSS 4.0No exploitEPSS 10%

    microsoft · dynamics gpMay 21, 2010

  • CVE-2010-1688
    42Plan

    Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, allows user-assisted rem

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    2brightsparks · syncbackMay 24, 2010

  • CVE-2010-2028
    44Plan

    Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service (crash) and possibly

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    mgenti · tftputil guiMay 24, 2010

  • CVE-2010-2033
    35Monitor

    Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joomla! allows remote att

    HighCVSS 7.5Proof of conceptEPSS 15%

    percha · com perchacategoriestreeMay 25, 2010

  • CVE-2010-2034
    33Monitor

    Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows remote attackers to re

    HighCVSS 7.5Proof of conceptEPSS 11%

    percha · com perchaimageattachMay 25, 2010

  • CVE-2010-2035
    35Monitor

    Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read a

    HighCVSS 7.5Proof of conceptEPSS 15%

    percha · com perchagalleryMay 25, 2010

  • CVE-2010-2036
    34Monitor

    Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 13%

    percha · com perchafieldsattachMay 25, 2010

  • CVE-2010-2037
    33Monitor

    Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! allows remote attacke

    HighCVSS 7.5Proof of conceptEPSS 11%

    percha · com perchadownloadsattachMay 25, 2010

  • CVE-2010-2050
    34Monitor

    Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8.0b for Joomla! allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 13%

    joomla · joomla\!May 25, 2010

  • CVE-2009-4873
    46Plan

    Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of serv

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    rhinosoft · serv-uMay 26, 2010

  • CVE-2010-2084
    21Monitor

    Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows rem

    MediumCVSS 4.3No exploitEPSS 12%

    microsoft · asp.netMay 27, 2010

  • CVE-2010-1296
    43Plan

    Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted

    CriticalCVSS 9.3Proof of conceptEPSS 19%

    adobe · photoshop cs4May 27, 2010

  • CVE-2010-2089
    24Monitor

    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows cont

    MediumCVSS 5.0Proof of conceptEPSS 14%

    python · pythonMay 27, 2010

  • CVE-2010-2091
    22Monitor

    Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id param

    MediumCVSS 4.3Proof of conceptEPSS 17%

    microsoft · exchange serverMay 27, 2010

  • CVE-2010-2094
    31Monitor

    Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive i

    MediumCVSS 6.8Proof of conceptEPSS 12%

    php · phpMay 27, 2010

  • CVE-2010-2103
    27Monitor

    Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.

    MediumCVSS 4.3Proof of conceptEPSS 34%

    apache · axis2May 27, 2010

  • CVE-2010-1938
    44Plan

    Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-P

    CriticalCVSS 9.3Proof of conceptEPSS 21%

    freebsd · freebsdMay 28, 2010

  • CVE-2010-2115
    37Monitor

    SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.

    MediumCVSS 5.0WeaponizedEPSS 55%

    solarwinds · tftp serverMay 28, 2010