Skip to content
OpenAdvisories

Archive

June 2010

Vulnerabilities first published in this month (UTC), newest first.

490 results · Feed

  • Unscored —
    CVE-2010-1252 EPSS 21%

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute…

  • Unscored —
    CVE-2010-1246 Public exploit EPSS 25%

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an…

  • Unscored —
    CVE-2010-1250 EPSS 24%

    Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML F…

  • Unscored —
    CVE-2010-1253 EPSS 26%

    Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Conv…

  • Unscored —

    The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, …

  • Unscored —
    CVE-2010-1257 EPSS 22%

    Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 S…

  • Unscored —
    CVE-2010-1248 Public exploit EPSS 27%

    Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-1264 EPSS 24%

    Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a d…

  • Unscored —
    CVE-2010-1251 EPSS 21%

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute…

  • Unscored —
    CVE-2010-1245 Public exploit EPSS 22%

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML Fi…

  • Unscored —
    CVE-2010-1249 EPSS 25%

    Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format …

  • Unscored —

    dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which m…

  • Unscored —

    lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in…

  • High 7.8
    CVE-2010-1297 Exploited Public exploit EPSS 83%

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

    KEV Jun 8, 2022
  • Unscored —

    lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the meta…

  • Unscored —

    lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the…

  • Unscored —

    rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote a…

  • Unscored —

    lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before …

  • Medium —

    Joomla! vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in ad…

  • Unscored —
    CVE-2010-1636 Public exploit

    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32…

  • Unscored —

    The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attack…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote atta…

  • Unscored —

    Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users t…

  • Unscored —
    CVE-2010-1850 EPSS 22%

    Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2010-2159 Public exploit

    Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute a…

  • Unscored —

    The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk co…

  • Unscored —

    The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 al…

  • Unscored —

    The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) …

  • Unscored —

    SQL injection vulnerability in EMC RSA Key Manager (RKM) C Client 1.5.x allows user-assisted remote attackers to execut…

  • Unscored —

    yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora u…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2010-1962 EPSS 12%

    Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute …

  • Unscored —

    The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an e…

  • Unscored —

    transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify t…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow re…

  • Unscored —

    Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to ob…

  • Unscored —

    transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of a…

  • Unscored —

    emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink atta…

  • Unscored —
    CVE-2010-2156 Public exploit EPSS 76%

    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)…