Skip to content
OpenAdvisories

Archive

November 2010

Vulnerabilities first published in this month (UTC), newest first.

← October 2010 2010 / November December 2010 →
  1. 118
  2. 2 
  3. 39
  4. 44
  5. 537
  6. 6 
  7. 720
  8. 86
  9. 919
  10. 1015
  11. 11 
  12. 1215
  13. 13 
  14. 14 
  15. 1518
  16. 1637
  17. 177
  18. 18 
  19. 19 
  20. 2026
  21. 21 
  22. 228
  23. 23 
  24. 24 
  25. 25 
  26. 2623
  27. 27 
  28. 28 
  29. 299
  30. 307
All Critical High Medium Low Exploited only Public exploit

53 results · Clear filters · Feed

  • Unscored —
    CVE-2010-4185 Public exploit

    SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-4186 Public exploit

    SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10…

  • High 8.1
    CVE-2010-3962 Exploited Public exploit EPSS 97%

    Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary co…

    KEV Oct 6, 2025
  • Medium —
    CVE-2010-3863 Public exploit EPSS 55%

    Apache Shiro Path Traversal vulnerability

    Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./accou…

    org.apache.shiro:shiro-root Maven
  • Unscored —
    CVE-2010-4181 Public exploit

    Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backsla…

  • Unscored —
    CVE-2010-4151 Public exploit

    SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2010-4006 Public exploit

    Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x b…

  • Unscored —
    CVE-2010-4152 Public exploit

    SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to e…

  • Unscored —
    CVE-2010-3977 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugi…

    Web / CMS
  • Unscored —
    CVE-2010-4144 Public exploit

    SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-4143 Public exploit

    SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2010-4145 Public exploit

    Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2010-4142 Public exploit EPSS 63%

    Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a…