Skip to content
OpenAdvisories

Archive

October 2010

Vulnerabilities first published in this month (UTC), newest first.

← September 2010 2010 / October November 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 46
  5. 533
  6. 628
  7. 77
  8. 811
  9. 9 
  10. 10 
  11. 11 
  12. 1216
  13. 1386
  14. 1438
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 1948
  20. 2032
  21. 2131
  22. 228
  23. 23 
  24. 24 
  25. 2516
  26. 2612
  27. 2711
  28. 2818
  29. 2913
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

434 results · Feed

  • Unscored —
    CVE-2010-3560

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote…

  • Unscored —
    CVE-2010-3558

    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows re…

  • Unscored —
    CVE-2010-3571

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3557

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3568

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3563 Public exploit EPSS 84%

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote…

  • Unscored —
    CVE-2010-3572

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3556

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3976

    Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allow…

  • Unscored —
    CVE-2010-3975

    Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execu…

  • High 7.3
    CVE-2008-7263

    Improper Authentication in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

    pyftpdlib PyPI
  • Medium 4.3
    CVE-2008-7264

    Improper input validation in pyftpdlib

    The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.

    pyftpdlib PyPI
  • Medium 6.3
    CVE-2008-7262

    Directory traversal in pyftpdlib

    Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR comma…

    pyftpdlib PyPI
  • Unscored —
    CVE-2010-3157

    Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse …

  • Unscored —
    CVE-2010-3158

    Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse exe…

  • High 7.5
    CVE-2010-3494

    Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexp…

    pyftpdlib python-pyftpdlib python-pyftpdlib Debian Ubuntu PyPI
  • Medium —
    CVE-2010-3495

    Zope Object Database Denial of Service vulnerability

    Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an un…

    zodb3 PyPI
  • Unscored —
    CVE-2010-3492

    The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does n…

    python-py python2.7 Debian Azure Linux
  • Unscored —
    CVE-2010-3493

    Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers …

  • Medium —
    CVE-2009-5011

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an …

    pyftpdlib python-pyftpdlib Debian PyPI
  • Medium —
    CVE-2009-5013

    Uncontrolled Resource Consumption in pyftpdlib

    Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

    pyftpdlib python-pyftpdlib Debian PyPI
  • Medium —
    CVE-2009-5010

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexp…

    pyftpdlib PyPI
  • High —
    CVE-2009-5012

    Improper Access Control in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

    pyftpdlib python-pyftpdlib Debian PyPI
  • High 7.3
    CVE-2007-6737

    Improper Authentication in pyftpdlib

    FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid username, which makes it easier for remote attackers to obtain access via a brute-force attack.

    pyftpdlib PyPI
  • Medium 6.3
    CVE-2007-6741

    Improper privilege management in pyftpdlib

    The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated user…

    pyftpdlib PyPI
  • Medium 6.5
    CVE-2007-6740

    pyftpdlib vulnerable to allocation of resources without limits

    The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command.

    pyftpdlib PyPI
  • High 7.5
    CVE-2007-6738

    pyftpdlib Use of Insufficiently Random Values of port selection on PASV command

    pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the respons…

    pyftpdlib PyPI
  • Medium 6.3
    CVE-2007-6736

    Directory Traversal in pyftpdlib

    Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.

    pyftpdlib PyPI
  • High 7.5
    CVE-2007-6739

    Improper Input Validation in pyftpdlib

    FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.

    pyftpdlib PyPI
  • Unscored —
    CVE-2010-3750

    rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2…

  • Unscored —
    CVE-2010-3749 Public exploit EPSS 26%

    The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows…

  • Unscored —
    CVE-2010-3747 Public exploit EPSS 35%

    An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterp…

  • Unscored —
    CVE-2010-3751

    Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer …

  • Unscored —
    CVE-2010-3748

    Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 thr…

  • Unscored —
    CVE-2010-2578

    Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlaye…

  • Unscored —
    CVE-2010-2998

    Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attack…

  • Unscored —
    CVE-2010-0219 Public exploit Scanner template EPSS 91%

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other product…

  • Unscored —
    CVE-2010-3979

    Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login fi…

  • Unscored —
    CVE-2010-3982

    SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on…

  • Unscored —
    CVE-2010-3983

    CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involv…