Skip to content
OpenAdvisories

Archive

27 October 2010

Vulnerabilities first published on this day (UTC), newest first.

← September 2010 2010 / October /27 November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2010-3711

    libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, whic…

    pidgin Debian
  • Critical 9.8
    CVE-2010-3765 Exploited Public exploit EPSS 83%

    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, …

    KEV Oct 6, 2025
  • Medium —
    CVE-2010-3933

    Rails activerecord gem has Improper Input Validation vulnerability

    Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.

    activerecord RubyGems
  • Unscored —
    CVE-2010-3842

    Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used…

  • Unscored —
    CVE-2010-3713

    rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission bu…

  • Unscored —
    CVE-2010-3712

    Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers …

  • Unscored —
    CVE-2010-2891 Public exploit EPSS 14%

    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute a…

    libsmi libsmi Debian Azure Linux
  • Unscored —
    CVE-2010-4097

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote …

  • Unscored —
    CVE-2010-4099 Public exploit

    ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-4098

    monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2010-4096

    share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulat…

    monkeysphere Debian