Skip to content
OpenAdvisories

Archive

2 February 2010

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a den…

  • Unscored —
    CVE-2010-0442 Public exploit EPSS 13%

    The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticate…

  • Unscored —
    CVE-2010-0470 Public exploit

    Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to in…

  • Unscored —

    SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows rem…

  • Unscored —
    CVE-2010-0468 Public exploit

    Cross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote…

  • Unscored —
    CVE-2010-0467 Public exploit Scanner template EPSS 43%

    Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote atta…

  • Unscored —

    SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 all…

  • Unscored —
    CVE-2010-0010 EPSS 43%

    Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1…

  • Unscored —

    Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2…

  • Unscored —

    Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before…

  • Unscored —

    Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitr…

  • Unscored —

    The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt …