Skip to content
OpenAdvisories

Archive

August 2010

Vulnerabilities first published in this month (UTC), newest first.

← July 2010 2010 / August September 2010 →
  1. 1 
  2. 218
  3. 3 
  4. 417
  5. 510
  6. 618
  7. 7 
  8. 8 
  9. 920
  10. 10 
  11. 1146
  12. 12 
  13. 1314
  14. 14 
  15. 15 
  16. 1619
  17. 1717
  18. 18 
  19. 1924
  20. 2030
  21. 21 
  22. 22 
  23. 2311
  24. 2420
  25. 2531
  26. 2638
  27. 2718
  28. 28 
  29. 29 
  30. 3017
  31. 3112
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4989 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4984 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers t…

  • Unscored —
    CVE-2009-4987 Public exploit

    admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain a…

  • Unscored —
    CVE-2009-4977 Public exploit

    PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2009-4988 Public exploit EPSS 66%

    Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote att…

  • Unscored —
    CVE-2009-4993 Public exploit

    PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-4992 Public exploit

    SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-4978 Public exploit

    Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2009-4986 Public exploit

    Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote att…

  • Unscored —
    CVE-2009-4982 Public exploit

    SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remot…

  • Unscored —
    CVE-2010-1527 Public exploit EPSS 36%

    Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2010-3106 Public exploit EPSS 37%

    The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the…

  • Unscored —
    CVE-2010-2543 Public exploit

    Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers…

    cacti Debian
  • Unscored —
    CVE-2010-2544 Public exploit

    Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance C…

    cacti Debian
  • Unscored —
    CVE-2008-7258 Public exploit

    The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service…

    ssmtp Debian
  • Unscored —
    CVE-2010-2809 Public exploit

    The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI fe…

  • Medium —
    CVE-2010-1870 Public exploit Scanner template EPSS 92%

    Server side object manipulation in Apache Struts

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects…

    org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2010-3030 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote at…

  • Unscored —
    CVE-2010-2939 Public exploit

    Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a…

    openssl Debian
  • Unscored —
    CVE-2010-3023 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers …

  • Unscored —
    CVE-2010-3029 Public exploit

    SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-3024 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly …

  • Unscored —
    CVE-2010-3027 Public exploit

    SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2010-3026 Public exploit

    Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open…

  • Unscored —
    CVE-2010-1797 Public exploit EPSS 34%

    Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interp…

    freetype Debian
  • Unscored —
    CVE-2010-1799 Public exploit EPSS 34%

    Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote…

  • Unscored —
    CVE-2010-1888 Public exploit

    Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving th…

  • Unscored —
    CVE-2010-1887 Public exploit

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis…

  • Unscored —
    CVE-2010-1897 Public exploit

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis…

  • Unscored —
    CVE-2010-1890 Public exploit

    The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not proper…

  • High 7.8
    CVE-2010-1889 Public exploit

    Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, a…

  • Unscored —
    CVE-2010-1894 Public exploit

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not …

  • Unscored —
    CVE-2010-1900 Public exploit EPSS 40%

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Co…

  • Unscored —
    CVE-2010-2550 Public exploit EPSS 76%

    The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server …

  • High 7.5
    CVE-2010-2861 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow r…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2010-2561 Public exploit EPSS 25%

    Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to e…

  • High 7.8
    CVE-2010-2554 Public exploit

    The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Win…

  • Unscored —
    CVE-2010-2553 Public exploit EPSS 31%

    The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decom…

  • Unscored —
    CVE-2010-2973 Public exploit

    Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, all…

  • Unscored —
    CVE-2010-2709 Public exploit EPSS 40%

    Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote a…