Skip to content
OpenAdvisories

Archive

12 October 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 

16 results · Feed

  • Unscored —

    OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to o…

  • Unscored —

    Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL begin…

  • Unscored —

    The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a ce…

  • Unscored —

    OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoo…

  • Unscored —

    Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificate…

  • Unscored —

    Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace inf…

  • Unscored —

    Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of serv…

  • Unscored —

    bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a…

  • Unscored —

    The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a syml…

  • Unscored —

    Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of…

  • Unscored —

    Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verif…

  • Unscored —

    sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when …

  • Unscored —

    lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of …

  • Unscored —

    The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspe…

  • Unscored —
    CVE-2010-2951 EPSS 31%

    dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP …

  • Unscored —

    Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and op…