Skip to content
OpenAdvisories

Archive

August 2010

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 218
  3. 3 
  4. 417
  5. 510
  6. 618
  7. 7 
  8. 8 
  9. 920
  10. 10 
  11. 1146
  12. 12 
  13. 1314
  14. 14 
  15. 15 
  16. 1619
  17. 1717
  18. 18 
  19. 1924
  20. 2030
  21. 21 
  22. 22 
  23. 2311
  24. 2420
  25. 2531
  26. 2638
  27. 2718
  28. 28 
  29. 29 
  30. 3017
  31. 3112

380 results · Feed

  • Unscored —
    CVE-2010-2556 EPSS 28%

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2010-2557 EPSS 28%

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —

    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute a…

  • Unscored —
    CVE-2010-2561 Public exploit EPSS 25%

    Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to e…

  • Unscored —
    CVE-2010-2559 EPSS 28%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-2562 EPSS 18%

    Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac …

  • Unscored —

    The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Win…

  • Unscored —
    CVE-2010-2560 EPSS 24%

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2010-2558 EPSS 21%

    Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a …

  • Unscored —
    CVE-2010-2566 EPSS 15%

    The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do…

  • Unscored —

    Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via uns…

  • High 7.8
    CVE-2010-2554 Public exploit

    The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Win…

  • Unscored —

    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute a…

  • Unscored —

    Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via …

  • Unscored —
    CVE-2010-2553 Public exploit EPSS 31%

    The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decom…

  • Unscored —

    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute a…

  • Unscored —

    Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via …

  • Unscored —

    The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as sh…

  • Unscored —

    JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly cons…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows re…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in C…

  • Unscored —

    The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml qui…

  • Unscored —

    nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive in…

  • Unscored —

    RSA enVision before 3.7 SP1 allows remote authenticated users to cause a denial of service via unspecified vectors.

  • Low —

    MantisBT Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in manage_proj_cat_add.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action.

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow r…

  • Unscored —

    The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only c…

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password …

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to…

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, whic…

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for…

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service …

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to…

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implemen…

  • Unscored —

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has un…

  • Unscored —

    The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allow…

  • Unscored —

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devi…

  • Unscored —

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devi…

  • Unscored —

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devi…