Archive
October 2010
Vulnerabilities first published in this month (UTC), newest first.
37 results · Clear filters · Feed
-
Unscored —
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 …
-
Unscored —CVE-2010-4120 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.…
-
Critical 9.8
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, …
KEV Oct 6, 2025 -
Unscored —
Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute a…
-
Unscored —CVE-2010-4099 Public exploit
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary …
-
Unscored —
Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Micros…
-
Unscored —
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN ac…
-
Unscored —
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitra…
-
High —
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers …
-
Unscored —CVE-2010-4056 Public exploit
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon rece…
-
Unscored —CVE-2010-4057 Public exploit
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon rece…
-
Unscored —CVE-2010-4055 Public exploit
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a deni…
-
Unscored —
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.1…
-
Unscored —
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Updat…
-
Unscored —
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows …
-
Unscored —
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote…
-
Unscored —
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows…
-
Unscored —
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterp…
-
Unscored —
Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other product…
-
Unscored —CVE-2010-3841 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inj…
-
Unscored —
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect conf…
-
Unscored —CVE-2010-3581 Public exploit
Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows re…
-
Unscored —CVE-2010-3514 Public exploit
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Product…
-
Unscored —CVE-2010-3503 Public exploit
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integri…
-
Unscored —CVE-2010-2415 Public exploit
Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, …
-
Unscored —
mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Mic…
-
Unscored —
Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Shee…
-
Unscored —
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, …
-
Unscored —CVE-2010-2744 Public exploit
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Window…
-
Unscored —
Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Window…
-
Unscored —
The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of p…
-
Unscored —CVE-2010-3888 Public exploit
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown ve…
-
Unscored —CVE-2010-3884 Public exploit
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack …
-
Unscored —
Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execu…
-
Unscored —CVE-2010-3307 Public exploit
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow…
-
Unscored —CVE-2010-3742 Public exploit
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote atta…
-
Unscored —CVE-2010-3437 Public exploit
Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before …