Skip to content
OpenAdvisories

Archive

October 2010

Vulnerabilities first published in this month (UTC), newest first.

← September 2010 2010 / October November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

434 results · Feed

  • Unscored —
    CVE-2010-3360

    Hipo 0.6.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via …

  • Unscored —
    CVE-2010-3353

    Cowbell 0.2.7.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges…

  • Unscored —
    CVE-2010-3355

    Ember 0.5.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via…

  • Unscored —
    CVE-2010-3389

    The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in…

  • Unscored —
    CVE-2010-3377

    The (1) runSalome, (2) runTestMedCorba, (3) runLightSalome, and (4) hxx2salome scripts in SALOME 5.1.3 place a zero-len…

  • Unscored —
    CVE-2010-3365

    Mistelix 0.31 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges v…

  • Unscored —
    CVE-2010-3381

    The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0.3.2.2 place a zero-length directory name in the L…

    tangerine Debian
  • Unscored —
    CVE-2010-3382

    tauex in Tuning and Analysis Utilities (TAU) 2.16.4 places a zero-length directory name in the LD_LIBRARY_PATH, which a…

  • Unscored —
    CVE-2010-3357

    gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privil…

    gnome-subtitles Debian
  • Unscored —
    CVE-2010-3366

    Mn_Fit 5.13 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via…

  • Unscored —
    CVE-2010-3363

    roarify in roaraudio 0.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain p…

    roaraudio Debian
  • Unscored —
    CVE-2010-3358

    HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to ga…

  • Unscored —
    CVE-2010-3349

    Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges v…

    ardour Debian
  • Unscored —
    CVE-2010-3350

    bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges v…

  • Unscored —
    CVE-2010-3362

    lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges vi…

  • Unscored —
    CVE-2010-3364

    The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local user…

    vips Debian
  • Unscored —
    CVE-2010-3361

    The (1) iked, (2) ikea, and (3) ikec scripts in Shrew Soft IKE 2.1.5 place a zero-length directory name in the LD_LIBRA…

  • Unscored —
    CVE-2010-3378

    The (1) scilab, (2) scilab-cli, and (3) scilab-adv-cli scripts in Scilab 5.2.2 place a zero-length directory name in th…

    scilab Debian
  • Unscored —
    CVE-2010-3354

    dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gai…

  • Unscored —
    CVE-2010-3393

    magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users t…

    magics++ Debian
  • Medium —
    CVE-2010-2057

    Improper Authentication in Apache MyFaces

    shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modificatio…

    org.apache.myfaces.core:myfaces-impl org.apache.myfaces.shared:myfaces-shared-core Maven
  • Unscored —
    CVE-2010-3574

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3566

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 al…

  • Unscored —
    CVE-2010-3565

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1…

  • Unscored —
    CVE-2010-3567

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 al…

  • Unscored —
    CVE-2010-3550

    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 U…

  • Unscored —
    CVE-2010-3561

    Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 …

  • Unscored —
    CVE-2010-3554

    Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3548

    Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Bu…

  • Unscored —
    CVE-2010-3541

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3573 Public exploit EPSS 11%

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Updat…

  • Unscored —
    CVE-2010-3559

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3562

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3549

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3551

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3552 Public exploit EPSS 81%

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows …

  • Unscored —
    CVE-2010-3553

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3555

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote…

  • Unscored —
    CVE-2010-3570

    Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allow…

  • Unscored —
    CVE-2010-3569

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…