Skip to content
OpenAdvisories

Archive

January 2010

Vulnerabilities first published in this month (UTC), newest first.

← December 2009 2010 / January February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

319 results · Feed

  • High 8.1
    CVE-2010-0386

    The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which mak…

  • Unscored —
    CVE-2010-0383

    Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities,…

    tor Debian
  • Unscored —
    CVE-2010-0388 Public exploit

    Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows …

  • Unscored —
    CVE-2010-0387 Public exploit

    Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update …

  • Unscored —
    CVE-2010-0384

    Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP add…

  • Unscored —
    CVE-2010-0389

    The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL …

  • Unscored —
    CVE-2010-0385

    Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote …

    tor Debian
  • Unscored —
    CVE-2009-4241

    Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 1…

  • Unscored —
    CVE-2009-4243

    RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealP…

  • Unscored —
    CVE-2009-4247

    Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 th…

  • Unscored —
    CVE-2009-4248

    Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks…

  • Unscored —
    CVE-2009-4257

    Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlaye…

  • Unscored —
    CVE-2009-4242

    Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in Real…

  • Unscored —
    CVE-2009-4244

    Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 1…

  • Unscored —
    CVE-2009-4246

    Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer …

  • Unscored —
    CVE-2009-4245

    Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 1…

  • High 8.1
    CVE-2010-0248 Public exploit EPSS 53%

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  • Unscored —
    CVE-2010-0247 EPSS 19%

    Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote atta…

  • Unscored —
    CVE-2010-0290

    Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P…

    bind9 Debian
  • Unscored —
    CVE-2010-0246 EPSS 19%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-0027 Public exploit EPSS 34%

    The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API funct…

  • Unscored —
    CVE-2010-0380 Public exploit

    install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restricti…

  • Unscored —
    CVE-2010-0381

    SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attacker…

  • Unscored —
    CVE-2010-0244 EPSS 21%

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  • Unscored —
    CVE-2010-0245 EPSS 19%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-0382

    ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out…

    bind9 Debian
  • Unscored —
    CVE-2010-0097

    ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not pr…

    bind9 Debian
  • Unscored —
    CVE-2010-0230

    SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, whic…

  • Unscored —
    CVE-2010-0378

    Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows r…

  • Unscored —
    CVE-2010-0379 EPSS 16%

    Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in…

  • Unscored —
    CVE-2010-0138

    Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed i…

  • Unscored —
    CVE-2010-0376 Public exploit

    Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows r…

  • Unscored —
    CVE-2010-0137

    Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allow…

  • Unscored —
    CVE-2010-0375 Public exploit

    SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attacke…

  • Unscored —
    CVE-2010-0374 Public exploit

    Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote a…

  • Unscored —
    CVE-2010-0370

    Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a modu…

    Web / CMS
  • Unscored —
    CVE-2010-0377

    SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attacker…

  • Unscored —
    CVE-2010-0373 Public exploit

    SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-0372 Public exploit

    SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to…

  • Unscored —
    CVE-2010-0371 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inje…