Archive
October 2010
Vulnerabilities first published in this month (UTC), newest first.
434 results · Feed
-
Unscored —CVE-2010-3235 EPSS 21%
Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbit…
-
Unscored —CVE-2010-3217 EPSS 40%
Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word docum…
-
Unscored —
Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Shee…
-
Unscored —CVE-2010-3331 EPSS 25%
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving u…
-
Unscored —CVE-2010-3327 EPSS 14%
The implementation of HTML content creation in Microsoft Internet Explorer 6 through 8 does not remove the Anchor eleme…
-
Unscored —CVE-2010-2748 EPSS 19%
Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word …
-
Unscored —
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, …
-
Unscored —CVE-2010-2744 Public exploit
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Window…
-
Unscored —CVE-2010-2747 EPSS 21%
Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Wor…
-
Unscored —
Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Window…
-
Unscored —CVE-2010-2750 EPSS 20%
Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code …
-
Unscored —
The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform…
-
Unscored —
The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect int…
-
Unscored —
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to o…
-
Unscored —
Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL begin…
-
Unscored —
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a ce…
-
Unscored —
OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoo…
-
Unscored —
Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificate…
-
Unscored —
Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace inf…
-
Unscored —
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of serv…
-
Unscored —
bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a…
-
Unscored —
The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a syml…
-
Unscored —
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of…
-
Unscored —
Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verif…
-
Unscored —
sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when …
-
Unscored —
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of …
-
Unscored —
The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspe…
-
Unscored —CVE-2010-2951 EPSS 31%
dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP …
-
Unscored —
Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and op…
-
Unscored —
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown ve…
-
Unscored —
The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of p…
-
Unscored —
The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the c…
-
Unscored —CVE-2010-3888 Public exploit
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown ve…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inje…
-
Unscored —
Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remot…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and ear…
-
Unscored —
The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attacke…
-
Unscored —CVE-2010-3884 Public exploit
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack …
-
Unscored —
arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Re…
-
Unscored —
Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attack…