Skip to content
OpenAdvisories

Archive

6 December 2010

Vulnerabilities first published on this day (UTC), newest first.

← November 2010 2010 / December /6 January 2011 →
  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-7270

    OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ci…

    openssl Debian
  • Critical 9.8
    CVE-2010-4478

    OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protoco…

  • Unscored —
    CVE-2010-4294

    The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x…

  • Unscored —
    CVE-2010-4180

    OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prope…

    openssl Debian
  • Unscored —
    CVE-2010-4252

    OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol,…

  • Unscored —
    CVE-2010-4296

    vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 30154…

  • Unscored —
    CVE-2010-4297 Public exploit

    The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build …

  • Unscored —
    CVE-2010-4295

    Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VM…

  • Medium —
    CVE-2010-4408

    Apache Archiva does not require entry of the administrator's password at the time of modifying a user account

    Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privile…

    org.apache.archiva:archiva Maven
  • Unscored —
    CVE-2010-4411

    Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and condu…

    perl libcgi-pm-perl libcgi-simple-perl Debian
  • Unscored —
    CVE-2010-4410

    CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 an…

    perl libcgi-pm-perl libcgi-simple-perl Debian
  • Unscored —
    CVE-2010-4409 Public exploit EPSS 19%

    Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows con…

  • Unscored —
    CVE-2010-3066

    The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of servic…

  • High 7.8
    CVE-2010-3904 Exploited Public exploit EPSS 16%

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the…

    KEV May 12, 2023
  • Unscored —
    CVE-2010-3449 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1…

  • Unscored —
    CVE-2010-2639

    IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipi…

  • Unscored —
    CVE-2010-2761

    The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcod…

    perl libcgi-pm-perl libcgi-simple-perl Debian