Skip to content
OpenAdvisories

Archive

May 2010

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 

402 results · Feed

  • Unscored —

    IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which a…

  • Unscored —

    The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before un…

  • Unscored —

    The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote aut…

  • Unscored —

    Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local user…

  • Unscored —
    CVE-2009-3678 EPSS 13%

    Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on …

  • Unscored —
    CVE-2010-1939 Public exploit EPSS 15%

    Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by usin…

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly …

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly …

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly …

  • Unscored —

    Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspeci…

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly …

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly …

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly …

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to caus…

  • Unscored —

    Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of serv…

  • Unscored —

    Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2010-0987 EPSS 11%

    Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrar…

  • Unscored —

    Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609…

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2010-1550 EPSS 11%

    Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 al…

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows …

  • Unscored —
    CVE-2010-1552 Public exploit EPSS 67%

    Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01,…

  • Unscored —
    CVE-2010-1554 Public exploit EPSS 66%

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows …

  • Unscored —
    CVE-2010-1551 EPSS 12%

    Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Netwo…

  • Unscored —

    iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in …

  • Unscored —

    The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain v…

  • Unscored —

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU co…

  • Unscored —
    CVE-2010-1280 Public exploit EPSS 17%

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2010-1553 Public exploit EPSS 71%

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows …

  • Unscored —
    CVE-2010-1555 Public exploit EPSS 62%

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remot…

  • Unscored —

    Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information vi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote…

  • Unscored —
    CVE-2010-1920 Public exploit

    Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled,…

  • Unscored —
    CVE-2010-1925 Public exploit

    SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-1922 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in 29o3 CMS 0.1 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2010-1924 Public exploit

    SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers …

  • Unscored —
    CVE-2010-1923 Public exploit

    SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remo…

  • Unscored —
    CVE-2010-1926 Public exploit

    Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globa…

  • Unscored —
    CVE-2010-1928 Public exploit

    Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,…