Skip to content
OpenAdvisories

Archive

November 2010

Vulnerabilities first published in this month (UTC), newest first.

← October 2010 2010 / November December 2010 →
  1. 118
  2. 2 
  3. 39
  4. 44
  5. 537
  6. 6 
  7. 720
  8. 86
  9. 919
  10. 1015
  11. 11 
  12. 1215
  13. 13 
  14. 14 
  15. 1518
  16. 1637
  17. 177
  18. 18 
  19. 19 
  20. 2026
  21. 21 
  22. 228
  23. 23 
  24. 24 
  25. 25 
  26. 2623
  27. 27 
  28. 28 
  29. 299
  30. 307
All Critical High Medium Low Exploited only Public exploit

53 results · Clear filters · Feed

  • Unscored —
    CVE-2010-3858 Public exploit

    The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does …

  • Unscored —
    CVE-2010-4249 Public exploit

    The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not proper…

  • Unscored —
    CVE-2010-4077 Public exploit

    The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly…

  • Unscored —
    CVE-2010-4073 Public exploit

    The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local user…

  • Unscored —
    CVE-2010-4298 Public exploit

    SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbit…

  • Medium —
    CVE-2010-4172 Public exploit EPSS 42%

    Improper Neutralization of Input During Web Page Generation in Apache Tomcat

    Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsLi…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2010-3830 Public exploit

    Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allo…

  • Unscored —
    CVE-2010-4301 Public exploit

    epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers …

  • Unscored —
    CVE-2010-4300 Public exploit EPSS 14%

    Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector …

    wireshark Debian
  • Unscored —
    CVE-2010-2963 Public exploit

    drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on …

  • Unscored —
    CVE-2010-4165 Public exploit

    The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_M…

  • Unscored —
    CVE-2010-3804 Public exploit

    The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and bef…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2010-4210 Public exploit

    The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previ…

  • Unscored —
    CVE-2010-4107 Public exploit EPSS 13%

    The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printe…

  • Unscored —
    CVE-2010-4273 Public exploit

    SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-4230 Public exploit

    Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200…

  • Unscored —
    CVE-2010-4268 Public exploit

    SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote atta…

  • Unscored —
    CVE-2010-4272 Public exploit

    SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remot…

  • Unscored —
    CVE-2010-4234 Public exploit

    The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-0…

  • Unscored —
    CVE-2010-4269 Public exploit

    SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-4231 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera a…

  • Unscored —
    CVE-2010-4233 Public exploit

    The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware …

  • Unscored —
    CVE-2010-4232 Public exploit

    The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camer…

  • Unscored —
    CVE-2010-1840 Public exploit

    Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and…

  • Unscored —
    CVE-2010-2892 Public exploit

    gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated …

  • Unscored —
    CVE-2010-4236 Public exploit

    Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users t…

  • Unscored —
    CVE-2010-3894 Public exploit EPSS 12%

    Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryp…

  • Unscored —
    CVE-2010-3895 Public exploit

    esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbit…

  • Unscored —
    CVE-2010-3899 Public exploit

    IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote …

  • Unscored —
    CVE-2010-3893 Public exploit

    The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka S…

  • Unscored —
    CVE-2010-3891 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind E…

  • Unscored —
    CVE-2010-3870 Public exploit EPSS 11%

    The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed s…

  • Unscored —
    CVE-2010-4156 Public exploit EPSS 13%

    The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obta…

  • High 7.8
    CVE-2010-3333 Exploited Public exploit EPSS 89%

    Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and …

    KEV Mar 3, 2022
  • Unscored —
    CVE-2010-4221 Public exploit EPSS 91%

    Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow re…

    proftpd-dfsg Debian
  • Unscored —
    CVE-2010-3039 Public exploit

    /usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and…

  • Unscored —
    CVE-2010-3077 Public exploit

    Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allow…

  • Unscored —
    CVE-2010-3709 Public exploit EPSS 13%

    The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent…

  • Unscored —
    CVE-2010-4091 Public exploit EPSS 19%

    The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Window…

  • Unscored —
    CVE-2010-3639 Public exploit EPSS 22%

    Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linu…