Skip to content
OpenAdvisories

Archive

19 October 2010

Vulnerabilities first published on this day (UTC), newest first.

← September 2010 2010 / October /19 November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • Unscored —
    CVE-2010-3574

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3566

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 al…

  • Unscored —
    CVE-2010-3565

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1…

  • Unscored —
    CVE-2010-3567

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 al…

  • Unscored —
    CVE-2010-3550

    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 U…

  • Unscored —
    CVE-2010-3561

    Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 …

  • Unscored —
    CVE-2010-3554

    Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3548

    Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Bu…

  • Unscored —
    CVE-2010-3541

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3573 Public exploit EPSS 11%

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Updat…

  • Unscored —
    CVE-2010-3559

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3562

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3549

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3551

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3552 Public exploit EPSS 81%

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows …

  • Unscored —
    CVE-2010-3553

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3555

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote…

  • Unscored —
    CVE-2010-3570

    Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allow…

  • Unscored —
    CVE-2010-3569

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3560

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote…

  • Unscored —
    CVE-2010-3558

    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows re…

  • Unscored —
    CVE-2010-3571

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3557

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3568

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3563 Public exploit EPSS 84%

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote…

  • Unscored —
    CVE-2010-3572

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3556

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3976

    Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allow…

  • Unscored —
    CVE-2010-3975

    Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execu…

  • High 7.3
    CVE-2008-7263

    Improper Authentication in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

    pyftpdlib PyPI
  • Medium 4.3
    CVE-2008-7264

    Improper input validation in pyftpdlib

    The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.

    pyftpdlib PyPI
  • Medium 6.3
    CVE-2008-7262

    Directory traversal in pyftpdlib

    Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR comma…

    pyftpdlib PyPI
  • Unscored —
    CVE-2010-3157

    Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse …

  • Unscored —
    CVE-2010-3158

    Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse exe…

  • High 7.5
    CVE-2010-3494

    Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexp…

    pyftpdlib python-pyftpdlib python-pyftpdlib Debian Ubuntu PyPI
  • Medium —
    CVE-2010-3495

    Zope Object Database Denial of Service vulnerability

    Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an un…

    zodb3 PyPI
  • Unscored —
    CVE-2010-3492

    The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does n…

    python-py python2.7 Debian Azure Linux
  • Unscored —
    CVE-2010-3493

    Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers …

  • Medium —
    CVE-2009-5011

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an …

    pyftpdlib python-pyftpdlib Debian PyPI
  • Medium —
    CVE-2009-5013

    Uncontrolled Resource Consumption in pyftpdlib

    Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

    pyftpdlib python-pyftpdlib Debian PyPI