Skip to content
OpenAdvisories

Archive

March 2010

Vulnerabilities first published in this month (UTC), newest first.

← February 2010 2010 / March April 2010 →
  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128
All Critical High Medium Low Exploited only Public exploit

513 results · Feed

  • Unscored —
    CVE-2010-0807 EPSS 29%

    Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Medium 6.5
    CVE-2010-0488 EPSS 29%

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which al…

  • Unscored —
    CVE-2010-0805 Public exploit EPSS 81%

    The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, an…

  • Unscored —
    CVE-2010-0489 EPSS 24%

    Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary co…

  • High 8.1
    CVE-2010-0492 EPSS 28%

    Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2010-0490 EPSS 29%

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  • Unscored —
    CVE-2010-0494 EPSS 23%

    Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to b…

  • Unscored —
    CVE-2010-0491 EPSS 29%

    Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-0267 EPSS 34%

    Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers t…

  • Unscored —
    CVE-2010-0529 EPSS 12%

    Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execu…

  • Unscored —
    CVE-2010-0536

    Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2010-0532

    Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges …

  • Unscored —
    CVE-2010-0527

    Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause …

  • Unscored —
    CVE-2010-0531

    Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast …

  • Unscored —
    CVE-2010-0528

    Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2010-0448

    Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized a…

  • Unscored —
    CVE-2010-0450

    Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privile…

  • Unscored —
    CVE-2010-0449

    Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject …

  • Unscored —
    CVE-2010-0132

    Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression …

  • Unscored —
    CVE-2010-1030

    Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of servi…

  • Unscored —
    CVE-2010-1187

    The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibl…

  • Unscored —
    CVE-2010-1189

    MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which …

    mediawiki Debian
  • Unscored —
    CVE-2010-1194

    The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats tw…

    libesmtp Debian
  • Unscored —
    CVE-2010-1195

    Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20…

    ikiwiki Debian
  • Unscored —
    CVE-2010-1190

    thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check…

    mediawiki Debian
  • Unscored —
    CVE-2010-1192

    libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subject's Commo…

    libesmtp Debian
  • Unscored —
    CVE-2010-1188

    Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is se…

  • Unscored —
    CVE-2010-1191

    Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended acce…

  • Unscored —
    CVE-2010-1216 Public exploit

    PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_glo…

  • Unscored —
    CVE-2010-1219 Public exploit Scanner template

    Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read…

  • Unscored —
    CVE-2010-1218

    Cross-site scripting (XSS) vulnerability in the mm_forum extension 1.8.2 and earlier for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2010-1217 Public exploit Scanner template

    Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is…

  • Unscored —
    CVE-2009-4763

    Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack ve…

  • Unscored —
    CVE-2010-0521

    Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, whi…

  • Unscored —
    CVE-2010-0498

    Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record …

  • Unscored —
    CVE-2010-0514

    Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2010-0510

    Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allo…

  • Unscored —
    CVE-2010-0518

    QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —
    CVE-2010-0062

    Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote at…

  • Unscored —
    CVE-2010-0064

    DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, whic…