Skip to content
OpenAdvisories

Archive

October 2010

Vulnerabilities first published in this month (UTC), newest first.

← September 2010 2010 / October November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

434 results · Feed

  • Unscored —
    CVE-2010-4087

    IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of s…

  • Unscored —
    CVE-2010-4084

    dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2010-4088

    dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2010-4090

    Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2010-4086

    dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2010-4085

    dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2010-4089

    IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of s…

  • Unscored —
    CVE-2010-3036

    Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Servi…

  • Medium —
    CVE-2010-3700

    Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security

    VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

    org.springframework.security:spring-security-core org.acegisecurity:acegi-security Maven
  • Unscored —
    CVE-2010-3654 Public exploit EPSS 70%

    Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 …

  • Unscored —
    CVE-2010-3655

    Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbit…

  • Unscored —
    CVE-2010-2581

    dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2010-2582

    An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buff…

  • Unscored —
    CVE-2010-4121

    The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication fo…

  • Unscored —
    CVE-2010-4120 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.…

  • Unscored —
    CVE-2010-0112

    Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager befo…

  • Unscored —
    CVE-2010-4029

    Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote att…

  • Unscored —
    CVE-2010-4027

    Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary fi…

  • Unscored —
    CVE-2010-4028

    Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to caus…

  • Unscored —
    CVE-2010-4023

    Cross-site scripting (XSS) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to i…

  • Unscored —
    CVE-2010-4026

    Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging…

  • Unscored —
    CVE-2010-4024

    Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attacke…

  • Unscored —
    CVE-2010-4025

    Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2010-3990

    Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2010-3989

    Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remo…

  • Unscored —
    CVE-2010-3987

    Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote atta…

  • Unscored —
    CVE-2010-3991

    Cross-site scripting (XSS) vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to i…

  • Unscored —
    CVE-2010-3994

    Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attac…

  • Unscored —
    CVE-2010-3992

    Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote authenticated users to gain p…

  • Unscored —
    CVE-2010-3988

    Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass…

  • Unscored —
    CVE-2010-3993

    Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive…

  • Unscored —
    CVE-2010-3711

    libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, whic…

    pidgin Debian
  • Critical 9.8
    CVE-2010-3765 Exploited Public exploit EPSS 83%

    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, …

    KEV Oct 6, 2025
  • Medium —
    CVE-2010-3933

    Rails activerecord gem has Improper Input Validation vulnerability

    Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.

    activerecord RubyGems
  • Unscored —
    CVE-2010-3842

    Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used…

  • Unscored —
    CVE-2010-3713

    rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission bu…

  • Unscored —
    CVE-2010-3712

    Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers …

  • Unscored —
    CVE-2010-2891 Public exploit EPSS 14%

    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute a…

    libsmi libsmi Debian Azure Linux
  • Unscored —
    CVE-2010-4097

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote …

  • Unscored —
    CVE-2010-4099 Public exploit

    ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary …