Skip to content
OpenAdvisories

Archive

September 2010

Vulnerabilities first published in this month (UTC), newest first.

← August 2010 2010 / September October 2010 →
  1. 1 
  2. 2 
  3. 316
  4. 4 
  5. 5 
  6. 6 
  7. 726
  8. 815
  9. 927
  10. 1018
  11. 11 
  12. 12 
  13. 138
  14. 1410
  15. 1525
  16. 1624
  17. 1719
  18. 18 
  19. 19 
  20. 2019
  21. 2110
  22. 2216
  23. 2312
  24. 2423
  25. 25 
  26. 26 
  27. 27 
  28. 286
  29. 2914
  30. 309
All Critical High Medium Low Exploited only Public exploit

297 results · Feed

  • Unscored —
    CVE-2010-1824

    Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome…

  • Unscored —
    CVE-2010-1767

    Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r570…

  • Unscored —
    CVE-2010-1773

    Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as …

  • Unscored —
    CVE-2010-1823

    Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attacke…

  • Unscored —
    CVE-2010-3304

    The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configuration…

    dovecot Debian
  • Unscored —
    CVE-2010-3283

    Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users…

  • Unscored —
    CVE-2010-3306 Public exploit

    Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers …

    weborf Debian
  • Unscored —
    CVE-2010-3261

    Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read uns…

  • Unscored —
    CVE-2010-3284

    Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to obtain sensitive…

  • Unscored —
    CVE-2010-3294

    Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP a…

  • Unscored —
    CVE-2010-3285

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a…

  • Medium 6.1
    CVE-2010-2491

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program.

    roundup PyPI
  • Unscored —
    CVE-2010-3280

    The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact…

  • Unscored —
    CVE-2010-3281

    Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch…

  • Unscored —
    CVE-2010-3279

    The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-…

  • Unscored —
    CVE-2010-2834

    Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communi…

  • Unscored —
    CVE-2010-2828

    Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE …

  • Unscored —
    CVE-2010-2836

    Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows rem…

  • Unscored —
    CVE-2010-2830

    The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, a…

  • Unscored —
    CVE-2010-2833

    Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 al…

  • Unscored —
    CVE-2010-2829

    Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE …

  • Unscored —
    CVE-2010-2831

    Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows…

  • Unscored —
    CVE-2010-2832

    Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allo…

  • Unscored —
    CVE-2010-2835

    Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communi…

  • Unscored —
    CVE-2010-3489 Public exploit

    Cross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom (formerly Netautor …

  • Unscored —
    CVE-2010-3484 Public exploit

    SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands…

    mapserver Debian
  • Unscored —
    CVE-2010-3487

    Directory traversal vulnerability in YelloSoft Pinky 1.0 for Windows allows remote attackers to read arbitrary files vi…

  • Unscored —
    CVE-2010-3481 Public exploit

    Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, all…

  • Unscored —
    CVE-2010-3485 Public exploit

    SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands…

    mapserver Debian
  • Unscored —
    CVE-2010-3483 Public exploit

    cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administr…

  • Unscored —
    CVE-2010-3482 Public exploit

    Multiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote authenticated administrator…

  • Unscored —
    CVE-2010-3486 Public exploit

    Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arb…

  • Unscored —
    CVE-2010-3488

    Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... (triple d…

  • Unscored —
    CVE-2010-3479 Public exploit

    SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2010-3480 Public exploit

    Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows r…

  • Unscored —
    CVE-2009-5003 Public exploit

    SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-3301 Public exploit

    The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on…

  • Unscored —
    CVE-2010-3332 Public exploit EPSS 68%

    Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Inter…

  • Unscored —
    CVE-2010-3314 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versi…

  • High —
    CVE-2010-3313 Public exploit

    EGroupware Code Injection vulnerability

    phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote at…

    egroupware/egroupware Packagist