Skip to content
OpenAdvisories

Archive

5 October 2010

Vulnerabilities first published on this day (UTC), newest first.

← September 2010 2010 / October /5 November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2010-0218

    ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to acce…

  • Unscored —
    CVE-2010-3303

    Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators …

  • Unscored —
    CVE-2010-3760

    FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0…

  • Unscored —
    CVE-2010-3763

    Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows remote attackers to in…

  • Unscored —
    CVE-2010-3754

    The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack …

  • Unscored —
    CVE-2010-3758

    Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack …

  • Unscored —
    CVE-2010-3302

    Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authentica…

  • Unscored —
    CVE-2010-3755

    The _DAS_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0…

  • Unscored —
    CVE-2010-3761

    Unspecified vulnerability in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.…

  • Unscored —
    CVE-2010-3762

    ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multipl…

    bind9 Debian
  • Unscored —
    CVE-2010-3759

    FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0…

  • Unscored —
    CVE-2010-3756

    The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack …

  • Unscored —
    CVE-2010-3752

    programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute …

  • Unscored —
    CVE-2010-3757

    Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager…

  • Unscored —
    CVE-2010-3308

    Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authentica…

  • Unscored —
    CVE-2010-3753

    programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute …

  • Unscored —
    CVE-2010-3736

    Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator …

  • Unscored —
    CVE-2010-3307 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow…

  • Unscored —
    CVE-2010-3730

    Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, …

  • Unscored —
    CVE-2010-3739

    The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to captu…

  • Unscored —
    CVE-2010-3742 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote atta…

  • Unscored —
    CVE-2010-3732

    The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of servi…

  • Unscored —
    CVE-2010-3733

    The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2spr…

  • Unscored —
    CVE-2010-3738

    The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value correspon…

  • Unscored —
    CVE-2010-3737

    Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users …

  • Unscored —
    CVE-2010-3735

    The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to …

  • Unscored —
    CVE-2010-3741

    The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, whic…

  • Unscored —
    CVE-2010-3740

    The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not prope…

  • Unscored —
    CVE-2010-3731

    Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2das…

  • Unscored —
    CVE-2010-3734

    The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on passwo…

  • Unscored —
    CVE-2010-3729

    The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow…

  • Unscored —
    CVE-2010-2535

    Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authent…

  • Unscored —
    CVE-2010-2653

    Race condition in the hvc_close function in drivers/char/hvc_console.c in the Linux kernel before 2.6.34 allows local u…