Skip to content
OpenAdvisories

Archive

12 November 2010

Vulnerabilities first published on this day (UTC), newest first.

← October 2010 2010 / November /12 December 2010 →
  1. 118
  2. 2 
  3. 39
  4. 44
  5. 537
  6. 6 
  7. 720
  8. 86
  9. 919
  10. 1015
  11. 11 
  12. 1215
  13. 13 
  14. 14 
  15. 1518
  16. 1637
  17. 177
  18. 18 
  19. 19 
  20. 2026
  21. 21 
  22. 228
  23. 23 
  24. 24 
  25. 25 
  26. 2623
  27. 27 
  28. 28 
  29. 299
  30. 307
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2010-4236 Public exploit

    Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users t…

  • Unscored —
    CVE-2010-3897

    ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in th…

  • Unscored —
    CVE-2010-3896

    The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, …

  • Unscored —
    CVE-2010-3894 Public exploit EPSS 12%

    Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryp…

  • Unscored —
    CVE-2010-3895 Public exploit

    esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbit…

  • Unscored —
    CVE-2010-3899 Public exploit

    IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote …

  • Unscored —
    CVE-2010-3892

    Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x …

  • Unscored —
    CVE-2010-3893 Public exploit

    The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka S…

  • Unscored —
    CVE-2010-3898

    IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) c…

  • Unscored —
    CVE-2009-5017

    Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote at…

  • Unscored —
    CVE-2009-5016

    Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attac…

  • Unscored —
    CVE-2010-3890

    Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to injec…

  • Unscored —
    CVE-2010-3891 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind E…

  • Unscored —
    CVE-2010-3870 Public exploit EPSS 11%

    The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed s…

  • Unscored —
    CVE-2010-2637

    IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security p…