Skip to content
OpenAdvisories

Archive

2 December 2010

Vulnerabilities first published on this day (UTC), newest first.

← November 2010 2010 / December /2 January 2011 →
  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2010-4281 Public exploit

    Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows r…

  • Unscored —
    CVE-2010-4313 Public exploit

    Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users …

  • Unscored —
    CVE-2010-4279 Public exploit EPSS 66%

    The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which a…

  • Unscored —
    CVE-2010-4280 Public exploit

    Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2010-4282 Public exploit Scanner template EPSS 20%

    Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute …

  • Unscored —
    CVE-2010-4278 Public exploit EPSS 11%

    operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary com…

  • Unscored —
    CVE-2010-4283 Public exploit

    PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers …

  • Unscored —
    CVE-2010-4371 Public exploit

    Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vec…

  • Unscored —
    CVE-2010-4367 Public exploit EPSS 27%

    awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute ar…

    awstats Debian
  • Unscored —
    CVE-2010-3267 Public exploit

    Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbit…

  • Unscored —
    CVE-2010-3266 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to …