Skip to content
OpenAdvisories

Archive

5 April 2010

Vulnerabilities first published on this day (UTC), newest first.

← March 2010 2010 / April /5 May 2010 →
  1. 148
  2. 2 
  3. 3 
  4. 4 
  5. 543
  6. 624
  7. 711
  8. 815
  9. 918
  10. 10 
  11. 11 
  12. 1221
  13. 1366
  14. 1440
  15. 1510
  16. 1614
  17. 17 
  18. 18 
  19. 1913
  20. 2027
  21. 2119
  22. 2216
  23. 2328
  24. 24 
  25. 25 
  26. 2617
  27. 2724
  28. 2818
  29. 2928
  30. 3016
All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Unscored —
    CVE-2010-0175

    Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.…

  • Unscored —
    CVE-2010-0173

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thun…

  • Unscored —
    CVE-2010-0176

    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey befo…

  • Unscored —
    CVE-2010-0178

    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent…

  • Unscored —
    CVE-2010-0181

    Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situati…

  • Unscored —
    CVE-2010-0174

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.…

  • Unscored —
    CVE-2010-0179

    Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in …

  • Unscored —
    CVE-2010-0177

    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the conten…

  • Unscored —
    CVE-2010-0182

    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and Se…

  • Low —
    CVE-2010-0684

    Cross-site scripting in Apache ActiveMQ

    Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

    org.apache.activemq:activemq-parent Maven
  • Unscored —
    CVE-2010-0625

    Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows…

  • Unscored —
    CVE-2010-0009

    Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion…

  • Medium —
    CVE-2010-1244

    Cross-site request forgery in Apache ActiveMQ

    Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue…

    org.apache.activemq:activemq-parent Maven
  • Unscored —
    CVE-2009-2936 Public exploit EPSS 64%

    The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy serv…

    varnish Debian
  • Unscored —
    CVE-2009-2822

    AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network ex…

  • Unscored —
    CVE-2004-2767

    NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote …

  • Unscored —
    CVE-2008-3279

    Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a craf…

  • Unscored —
    CVE-2001-1587

    NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend…

  • Unscored —
    CVE-2002-2434

    NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows…

  • Unscored —
    CVE-2002-2432

    Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cau…

  • Unscored —
    CVE-2002-2433

    NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of serv…

  • Unscored —
    CVE-2000-1245

    Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remot…

  • Unscored —
    CVE-2000-1246

    NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial…

  • Unscored —
    CVE-2005-4887

    NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact vi…

  • Unscored —
    CVE-2005-4888

    NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (exc…

  • Unscored —
    CVE-2010-0825

    lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files…

    xemacs21 Debian
  • Medium 5.4
    CVE-2010-0828

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.

    moin PyPI
  • Unscored —
    CVE-2010-0826

    The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the cur…

    libnss-db Debian
  • Unscored —
    CVE-2010-1243

    The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations,…

  • Unscored —
    CVE-2010-1238

    MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and…

  • Unscored —
    CVE-2010-1241

    Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x b…

  • Unscored —
    CVE-2010-1239 Public exploit

    Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Ac…

  • Unscored —
    CVE-2010-1242

    Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1…

  • Unscored —
    CVE-2010-1240 Public exploit EPSS 74%

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents o…

  • Unscored —
    CVE-2009-4764

    Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it ea…

  • Unscored —
    CVE-2003-1594

    NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which…

  • Unscored —
    CVE-2003-1593

    NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login res…

  • Unscored —
    CVE-2003-1596

    NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous us…

  • Unscored —
    CVE-2003-1592

    Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow rem…

  • Unscored —
    CVE-2003-1591

    NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers …