Skip to content
OpenAdvisories

Archive

4 August 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 218
  3. 3 
  4. 417
  5. 510
  6. 618
  7. 7 
  8. 8 
  9. 920
  10. 10 
  11. 1146
  12. 12 
  13. 1314
  14. 14 
  15. 15 
  16. 1619
  17. 1717
  18. 18 
  19. 1924
  20. 2030
  21. 21 
  22. 22 
  23. 2311
  24. 2420
  25. 2531
  26. 2638
  27. 2718
  28. 28 
  29. 29 
  30. 3017
  31. 3112

17 results · Feed

  • Unscored —

    The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which m…

  • Medium 6.1

    MoinMoin cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) acti…

  • Unscored —

    The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global Fil…

  • Unscored —

    The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_…

  • Medium 6.1

    MoinMoin cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/language_setup.…

  • Unscored —

    Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers t…

  • Medium 6.1

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) Pag…

  • Unscored —

    loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to…

  • Unscored —

    The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of…

  • Critical 9.8
    CVE-2010-2965 EPSS 58%

    The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756…

  • Unscored —
    CVE-2010-2860 Public exploit

    The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for …

  • High 8.8
    CVE-2010-1871 Exploited Public exploit EPSS 83%

    JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly…

    KEV Dec 10, 2021
  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php/include/classes/class.…

  • Unscored —
    CVE-2010-2932 Public exploit

    Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrar…

  • Unscored —

    BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in li…

  • Unscored —
    CVE-2010-2933 Public exploit

    SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2010-2931 Public exploit

    Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a…