Skip to content
OpenAdvisories

Archive

25 March 2010

Vulnerabilities first published on this day (UTC), newest first.

← February 2010 2010 / March /25 April 2010 →
  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128
All Critical High Medium Low Exploited only Public exploit

40 results · Feed

  • Unscored —
    CVE-2010-0628

    The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MI…

    krb5 Debian
  • Unscored —
    CVE-2010-1122

    Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2010-0579

    The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) …

  • Unscored —
    CVE-2010-0584

    Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to…

  • Unscored —
    CVE-2010-0170

    Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might …

  • Unscored —
    CVE-2010-0172

    toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in…

  • Unscored —
    CVE-2010-0576

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x thr…

  • Unscored —
    CVE-2010-0577

    Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers …

  • Unscored —
    CVE-2010-0169

    The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5…

  • Unscored —
    CVE-2010-0580

    Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-0167 Public exploit EPSS 10%

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird befo…

  • Unscored —
    CVE-2010-0585

    Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote…

  • Unscored —
    CVE-2010-0578

    The IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+ allows remote attackers…

  • Unscored —
    CVE-2010-0583

    Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attac…

  • Unscored —
    CVE-2010-0586

    Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote…

  • Unscored —
    CVE-2010-0165

    The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 befo…

  • Unscored —
    CVE-2010-0582

    Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (interfac…

  • Unscored —
    CVE-2010-0166 Public exploit

    The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 b…

  • Unscored —
    CVE-2010-0164

    Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in…

  • Unscored —
    CVE-2010-0171

    Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonke…

  • Unscored —
    CVE-2010-0581

    Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-0168 Public exploit EPSS 13%

    The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in…

  • Unscored —
    CVE-2010-1118 EPSS 22%

    Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2010-1119 Public exploit EPSS 19%

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari bef…

  • Unscored —
    CVE-2010-1121

    Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to…

  • Unscored —
    CVE-2010-1120

    Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unkn…

  • Unscored —
    CVE-2010-1117 EPSS 14%

    Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base a…

  • Unscored —
    CVE-2010-1108

    Cross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x through 6.x-1.2 for Dr…

  • Unscored —
    CVE-2010-1116

    LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2010-1105

    Cross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers…

  • Unscored —
    CVE-2010-1115

    Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote at…

  • Unscored —
    CVE-2010-1111 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-1109 Public exploit

    Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic_quotes_gpc is disabled, allow remote …

  • Unscored —
    CVE-2010-1114 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exe…

  • Medium —
    CVE-2010-1104

    Moderate severity vulnerability that affects Zope2

    Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messag…

    zope2 PyPI
  • Unscored —
    CVE-2010-1106 Public exploit

    PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execu…

  • Unscored —
    CVE-2010-1107

    Cross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for …

  • Unscored —
    CVE-2010-1110

    Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories …

  • Unscored —
    CVE-2010-1113 Public exploit

    Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attacke…

  • Unscored —
    CVE-2010-1112 Public exploit

    Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web scri…