Skip to content
OpenAdvisories

Archive

18 February 2010

Vulnerabilities first published on this day (UTC), newest first.

← January 2010 2010 / February /18 March 2010 →
  1. 1 
  2. 212
  3. 312
  4. 417
  5. 517
  6. 6 
  7. 7 
  8. 810
  9. 92
  10. 1036
  11. 1121
  12. 1215
  13. 13 
  14. 14 
  15. 1512
  16. 165
  17. 174
  18. 1825
  19. 1917
  20. 20 
  21. 219
  22. 2216
  23. 2322
  24. 246
  25. 2518
  26. 2623
  27. 279
  28. 28 
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2010-0416 Public exploit EPSS 11%

    Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix…

  • Unscored —
    CVE-2010-0417

    Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a deni…

  • Unscored —
    CVE-2010-0647

    WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in …

  • Unscored —
    CVE-2010-0644

    Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows re…

  • Unscored —
    CVE-2010-0651

    WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin lo…

  • Unscored —
    CVE-2010-0645

    Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow r…

  • Unscored —
    CVE-2010-0659

    The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failu…

  • Unscored —
    CVE-2010-0648

    Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a…

  • Unscored —
    CVE-2010-0655 Public exploit

    Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial…

  • Unscored —
    CVE-2010-0663

    The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not i…

  • Unscored —
    CVE-2010-0650

    WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restric…

  • Unscored —
    CVE-2010-0646

    Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89,…

  • Unscored —
    CVE-2010-0649

    Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrom…

  • Unscored —
    CVE-2010-0653

    Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect M…

  • Unscored —
    CVE-2010-0643

    Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are …

  • Unscored —
    CVE-2010-0664

    Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_secu…

  • Unscored —
    CVE-2010-0652

    Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an in…

  • Unscored —
    CVE-2010-0654

    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and …

  • Unscored —
    CVE-2010-0661

    WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, a…

  • Unscored —
    CVE-2010-0657

    Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in…

  • Unscored —
    CVE-2010-0656

    WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an X…

  • Unscored —
    CVE-2010-0660

    Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances in…

  • Unscored —
    CVE-2010-0662

    The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not u…

  • Unscored —
    CVE-2010-0658

    Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbit…

  • Unscored —
    CVE-2010-0556

    browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials th…