Skip to content
OpenAdvisories

Archive

2 December 2010

Vulnerabilities first published on this day (UTC), newest first.

← November 2010 2010 / December /2 January 2011 →
  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2010-4281 Public exploit

    Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows r…

  • Unscored —
    CVE-2010-4313 Public exploit

    Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users …

  • Unscored —
    CVE-2010-4279 Public exploit EPSS 66%

    The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which a…

  • Unscored —
    CVE-2010-4280 Public exploit

    Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2010-4282 Public exploit Scanner template EPSS 20%

    Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute …

  • Unscored —
    CVE-2010-4278 Public exploit EPSS 11%

    operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary com…

  • Unscored —
    CVE-2010-4283 Public exploit

    PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers …

  • Unscored —
    CVE-2010-1324

    MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, whi…

    krb5 Debian
  • Unscored —
    CVE-2010-1323

    MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the ac…

    krb5 Debian
  • Unscored —
    CVE-2010-4374

    The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a M…

  • Unscored —
    CVE-2010-4369

    Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a cra…

    awstats Debian
  • Unscored —
    CVE-2010-4020

    MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote au…

    krb5 Debian
  • Unscored —
    CVE-2010-4370

    Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2010-4371 Public exploit

    Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vec…

  • Unscored —
    CVE-2010-4329

    Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (…

    phpmyadmin Debian
  • Unscored —
    CVE-2010-4367 Public exploit EPSS 27%

    awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute ar…

    awstats Debian
  • Unscored —
    CVE-2010-4368

    awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to…

  • Unscored —
    CVE-2010-4372

    Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via ve…

  • Unscored —
    CVE-2010-4021

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credential…

    krb5 Debian
  • Unscored —
    CVE-2010-4373

    The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via cra…

  • Unscored —
    CVE-2010-3267 Public exploit

    Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbit…

  • Unscored —
    CVE-2010-3266 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to …

  • Unscored —
    CVE-2010-2586

    Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute ar…

  • Unscored —
    CVE-2009-5020 Scanner template

    Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary…

    awstats Debian