Skip to content
OpenAdvisories

Archive

October 2010

Vulnerabilities first published in this month (UTC), newest first.

← September 2010 2010 / October November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High —
    CVE-2010-3714 Public exploit EPSS 24%

    TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

    The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers …

    typo3/cms Packagist
  • High 7.3
    CVE-2008-7263

    Improper Authentication in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

    pyftpdlib PyPI
  • High 7.5
    CVE-2010-3494

    Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexp…

    pyftpdlib python-pyftpdlib python-pyftpdlib Debian Ubuntu PyPI
  • High —
    CVE-2009-5012

    Improper Access Control in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

    pyftpdlib python-pyftpdlib Debian PyPI
  • High 7.3
    CVE-2007-6737

    Improper Authentication in pyftpdlib

    FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid username, which makes it easier for remote attackers to obtain access via a brute-force attack.

    pyftpdlib PyPI
  • High 7.5
    CVE-2007-6738

    pyftpdlib Use of Insufficiently Random Values of port selection on PASV command

    pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the respons…

    pyftpdlib PyPI
  • High 7.5
    CVE-2007-6739

    Improper Input Validation in pyftpdlib

    FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.

    pyftpdlib PyPI
  • High 7.8
    CVE-2010-1883 EPSS 23%

    Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP…