Skip to content
OpenAdvisories

Archive

25 October 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 

16 results · Feed

  • Unscored —

    Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4…

  • Unscored —

    Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00…

  • Unscored —

    Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Inform…

  • Unscored —

    Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Tro…

  • Unscored —

    Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL…

  • Unscored —

    Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain pri…

  • Unscored —

    Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.1…

  • Unscored —

    Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FI…

  • Unscored —

    Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse…

  • Unscored —

    Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users t…

  • Unscored —

    Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan hors…

  • High —
    CVE-2010-3714 Public exploit EPSS 24%

    TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

    The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers …

  • Unscored —

    The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not pr…

  • Unscored —

    The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain…

  • Medium —

    TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend

    Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote auth…

  • Unscored —

    Untrusted search path vulnerability in Apsaly before 3.74 allows local users to gain privileges via a Trojan horse exec…